Lucene search
+L

548 matches found

exploitpack
exploitpack
added 2008/03/21 12:0 a.m.18 views

DotNetNuke 4.8.1 - Default ValidationKey and DecriptionKey Weak Encryption

DotNetNuke 4.8.1 - Default ValidationKey and DecriptionKey Weak Encryption source: https://www.securityfocus.com/bid/28391/info DotNetNuke is prone to a weak encryption vulnerability. An attacker can exploit this issue to decrypt sensitive data. Information obtained may lead to further attacks...

7.4AI score
SaveExploits0
Cvelist
Cvelist
added 2005/12/05 12:0 a.m.22 views

CVE-2005-4002

WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation...

6.5AI score0.00982EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2004/03/18 5:0 a.m.35 views

CVE-2004-0351

Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data...

6.3AI score0.00498EPSS
SaveExploits1References4
CVE
CVE
added 2004/03/18 5:0 a.m.49 views

CVE-2004-0351

The CVE-2004-0351 issue concerns Spider Sales shopping cart, where the private key is stored in the same database/table as the public key. This design enables local users with database access to decrypt data, affecting confidentiality (partial). The available sources describe the vulnerable behav...

2.1CVSS6.7AI score0.00498EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2003/12/31 5:0 a.m.17 views

CVE-2003-1392

CryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could allow local users to use their own passphrase to decrypt the data...

6.6CVSS6.3AI score0.01501EPSS
SaveExploits0References3
Exploit DB
Exploit DB
added 2003/03/19 12:0 a.m.32 views

Computer Associates - Unicenter Asset Manager Stored Secret Data Decryption

source: https://www.securityfocus.com/bid/7808/info It has been reported that Unicenter Asset Manager stores password information in a way that may be easily recovered. Because of this, an attacker may be able to gain access to potentially sensitive resources. !/usr/bin/perl...

5.8AI score
SaveExploits0
NVD
NVD
added 2000/10/20 4:0 a.m.18 views

CVE-2000-0678

PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key ADK is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate...

5CVSS6.2AI score0.01496EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 1999/01/01 12:0 a.m.11 views

PT-2014-1693

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1i OpenSSL through 1.0.1i PAN-OS versions 6.1.1 and earlier PAN-OS versions 6.0.7 and earlier PAN-OS versions 5.1.x and 5.0.x EOS versions 4.12.0 through 4.12.7.1 EOS versions 4.13.0 through 4.13.6 Apple mac os x...

4.3CVSS8.7AI score0.99999EPSS
SaveExploits7
Rows per page
Query Builder