38 matches found
EUVD-2015-7631
Malware in sbrugna...
EUVD-2015-4009
Malware in sbrugna...
CVE-2021-36751
ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation without knowledge of the key. This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation...
CVE-2021-36751
ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation without knowledge of the key. This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation...
CVE-2021-36751
ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation without knowledge of the key. This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation...
Design/Logic Flaw
ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation without knowledge of the key. This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation...
CVE-2021-36751
ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation without knowledge of the key. This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation...
CVE-2021-36751: Insufficient Verification of Data Authenticity
ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation without knowledge of the key. This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation...
CVE-2021-36751
ENC DataVault 7.2.3 and earlier, including OEM versions, use a cryptographic algorithm vulnerable to ciphertext malleability, and lack a data-integrity check. An attacker could modify ciphertext, causing corresponding plaintext changes. The vulnerability is tied to ENC DataVault’s encryption choi...
ENC DataVault Encryption Issues Vulnerabilities
Enc Security Enc DataVault is a solution from the Dutch company Enc Security. Turn any Usb drive into a secure removable disk for important files. ENC DataVault suffers from an encryption issue vulnerability that stems from ENC DataVault 7.1.1W using an incorrect encryption algorithm, which can b...
CVE-2021-36750
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...
CVE-2021-36750
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...
Design/Logic Flaw
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...
CVE-2021-36750
Summary: CVE-2021-36750 affects ENC DataVault prior to 7.2 and VaultAPI v67, where a faulty key derivation process is reported. The described vulnerability enables attackers to determine the passwords of all DataVault users across USB drives branded by multiple vendors. The root cause is describe...
EUVD-2021-23339
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...
CVE-2021-36750
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...
PT-2021-21336
Name of the Vulnerable Software and Affected Versions ENC DataVault versions prior to 7.2 VaultAPI version v67 Description The issue is related to the mishandling of key derivation, which makes it easier for attackers to determine the passwords of all DataVault users. This affects DataVault users...
CVE-2021-36750: Improper Restriction of Excessive Authentication Attempts
ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...