11983 matches found
GitHub Enterprise Server 数据伪造问题漏洞
GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that stem...
IBM Engineering Lifecycle Optimization Publishing Encryption Issue Vulnerability
IBM Engineering Lifecycle Optimization Publishing is an automated document generation solution from International Business Machines IBM. IBM Engineering Lifecycle Optimization Publishing suffers from a cryptographic issue vulnerability that stems from the use of a weaker-than-expected encryption...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools, related to the use of cryptographic algorithms containing defects, allows attackers to gain unauthorized access to protected information.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...
CVE-2024-22347
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2024-22347
CVE-2024-22347 (IBM UrbanCode Velocity / IBM DevOps Velocity) affects IBM UrbanCode Velocity 4.0.0 – 4.0.25 and IBM DevOps Velocity 5.0.0. The vulnerability stems from the use of weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. ...
CVE-2024-22347 IBM UrbanCode Velocity information disclosure
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2024-22347 IBM UrbanCode Velocity information disclosure
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
The vulnerability of the Ivanti EPM endpoint management software, related to errors in verifying the cryptographic signature, allows a hacker to execute remote code.
The vulnerability of the Ivanti EPM endpoint management software is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to execute remote code...
CVE-2024-8603
A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices...
CVE-2024-8603
CVE-2024-8603 affects B&R Automation Runtime and B&R mapp View versions prior to 6.1, where the SSL/TLS component uses a broken or risky cryptographic algorithm. Unauthenticated network-based attackers may masquerade as services on impacted devices. Multiple sources (NVD/NCSA advisory references ...
Silicon Labs EmberZNet 访问控制错误漏洞
Silicon Labs EmberZNet is a complete Zigbee protocol package from Silicon Labs, Inc. that contains all the elements required for robust and reliable mesh networking applications on the Silicon Labs Ember platform. An access control error vulnerability exists in Silicon Labs EmberZNet, which stems...
CVE-2025-21336
Windows Cryptographic Information Disclosure Vulnerability...
CVE-2025-21336 Windows Cryptographic Information Disclosure Vulnerability
...
CVE-2025-21336
Technical details about CVE-2025-21336 are not publicly provided in the supplied documents. The materials reference a Windows cryptographic information disclosure vulnerability but do not specify affected products/versions or fixes.
CVE-2024-50564
A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped...
CVE-2024-50564
A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped...
CVE-2024-50564
A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped...
CVE-2024-50564
CVE-2024-50564 affects Fortinet FortiClientWindows across versions 6.4.x–7.4.0. The issue is a hard-coded cryptographic key used for interprocess communication via a monitored named pipe, which may enable a low-privileged user to decrypt IPC data. The vulnerability is documented as a local issue ...
CVE-2023-37936
Fortinet FortiSwitch is affected by CVE-2023-37936 due to use of a hard-coded cryptographic key. Versions affected include 7.4.0 and 7.2.0 through 7.2.5, 7.0.0 through 7.0.7, 6.4.0 through 6.4.13, 6.2.0 through 6.2.7, and 6.0.0 through 6.0.7. The underlying issue enables an attacker to execute un...
