Lucene search
K

75 matches found

CNVD
CNVD
added 2026/04/23 12:0 a.m.1 views

IBM Verify Identity Access Container Weak Encryption Algorithm Vulnerability

IBM Verify Identity Access Container is an identity and access management solution for providing secure single sign-on and access control. A weak cryptographic algorithm vulnerability exists in IBM Verify Identity Access Container. The vulnerability stems from the product's use of a...

6.5CVSS5.4AI score0.00016EPSS
Exploits0
Cvelist
Cvelist
added 2026/04/22 11:38 p.m.31 views

CVE-2026-5926 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 uses weaker than expected cryptographic algorithms that could allow an...

6.5CVSS0.00016EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/14 3:40 a.m.2 views

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (CVE-2026-5926)

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Vulnerability Details CVEID:CVE-2026-5926 DESCRIPTION: IBM Security Verify Access uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly...

6.5CVSS5.8AI score0.00016EPSS
Exploits0Affected Software2
Cvelist
Cvelist
added 2026/04/01 8:46 p.m.17 views

CVE-2025-13916 Multiple vulnerabilities have been addressed in IBM Aspera Shares

IBM Aspera Shares 1.9.9 through 1.11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.9CVSS0.0001EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.1 views

PT-2026-29615

CVE-2025-13916 IBM Aspera Shares 1.9.9 through 1.11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information https://t.co/9yjkajA2Sp...

5.9CVSS5.9AI score0.0001EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.0 views

PT-2026-28118

IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.9CVSS5.8AI score0.00011EPSS
Exploits0References2
NVD
NVD
added 2026/03/03 9:15 p.m.1 views

CVE-2025-14480

IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS0.00009EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/03 8:41 p.m.16 views

CVE-2025-14480 IBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptographic algorithms

IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.1CVSS0.00009EPSS
Exploits0References1
CVE
CVE
added 2026/03/03 8:41 p.m.6 views

CVE-2025-14480

CVE-2025-14480 is addressed in IBM’s Security Bulletin for the Aspera faspio Gateway. The vulnerability arises from using weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Affected product: Aspera faspio Gateway 1.3.6. Fixed in v...

7.5CVSS5.9AI score0.00009EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2026/02/24 4:24 p.m.2 views

CVE-2026-27519

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and exposed, an attacker can decrypt protected values and defeat confidentiality protections...

7.5CVSS5.8AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/19 1:28 a.m.3 views

CVE-2025-36379

IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS5.5AI score0.00018EPSS
Exploits0References1
OSV
OSV
added 2026/02/17 9:22 p.m.0 views

CVE-2025-36379

IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS5.8AI score0.00018EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/17 8:30 p.m.4 views

CVE-2025-36379 IBM Security QRadar EDR Software has multiple vulnerabilities

IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.9CVSS5.5AI score0.00018EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/02 9:52 p.m.2 views

CVE-2025-36253

IBM Concert 1.0.0 through 2.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.9CVSS5.4AI score0.00011EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/02 12:0 a.m.3 views

PT-2026-5700

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 2.1.0 Description IBM Concert utilizes cryptographic algorithms that are not sufficiently robust, potentially enabling an attacker to decrypt sensitive information. Recommendations Update to a version later...

7.5CVSS5.4AI score0.00011EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.1 views

Explorance Blue security vulnerabilities

Explorance Blue is a learning experience management software developed by the Canadian company Explorance. Versions of Explorance Blue prior to 8.14.12 contained security vulnerabilities. These vulnerabilities stemmed from the use of reversible symmetric encryption with hardcoded static keys to...

6.8CVSS5.8AI score0.00028EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/12/13 3:58 p.m.3 views

CVE-2025-53960

When issuing JSON Web Tokens JWT, Apache StreamPark directly uses the user's password as the HMAC signing key e.g., with the HS256 algorithm. An attacker can exploit this vulnerability to perform offline brute-force attacks on the user's password using a captured JWT, or to arbitrarily forge...

5.9CVSS6.8AI score0.00061EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/12 3:15 p.m.3 views

CVE-2025-53960 Apache StreamPark: Uses the user’s password as the secret key

When issuing JSON Web Tokens JWT, Apache StreamPark directly uses the user's password as the HMAC signing key e.g., with the HS256 algorithm. An attacker can exploit this vulnerability to perform offline brute-force attacks on the user's password using a captured JWT, or to arbitrarily forge...

6.5AI score0.00061EPSS
Exploits0References1
CNVD
CNVD
added 2025/11/27 12:0 a.m.2 views

IBM Concert Encryption Issues Vulnerabilities

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from a cryptographic issue vulnerability that stems from the use of weak encryption algorithms, which can ...

7.5CVSS6.7AI score0.00014EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-12504

Malware in sbrugna...

5.9CVSS6.3AI score0.00096EPSS
Exploits0References3
Rows per page
Query Builder