1949 matches found
USN-4376-2: OpenSSL vulnerabilities
USN-4376-1 fixed several vulnerabilities in OpenSSL. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Cesar Pereida García, Sohaib ul Hassan, Nicola Tuveri, Iaroslav Gridin, Alejandro Cabrera Aldaya, and Billy Brumley discovered...
CVE-2017-1712
"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat ROBOT attack. An attacker could iteratively query a server running a vulnerable TLS stack...
CVE-2020-4452
IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 181324...
PT-2020-9953
Name of the Vulnerable Software and Affected Versions: BIOTRONIK CardioMessenger II affected versions not specified Description: The issue concerns the storage of individual per-device credentials in a recoverable format. An attacker with physical access to the CardioMessenger can exploit these...
CVE-2020-9289
Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an attacker with access to the CLI configuration or the CLI backup file to decrypt the sensitive data, via knowledge of the hard-coded key...
SSB-DB Information Disclosure Vulnerability
SSB-DB is a security information storage plug-in. An information disclosure vulnerability exists in SSB-DB version 20.0.0, which stems from the 'get' method that can decrypt any message and can be exploited by an attacker to access private data...
IBM Planning Analytics Encryption Issue Vulnerability
IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. IBM Planning Analytics suffers from an encryption issue vulnerability that stems from a weak...
CVE-2020-4367
IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 179001...
Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax
RAUcrypto !Languagehttps://img.shields.io/badge/Lang-Pyth...
CVE-2020-4349
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178423...
Windows Gather Xshell and Xftp Passwords
This module can decrypt the password of xshell and xftp, if the user chooses to remember the password. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Xshell and Xftp Passwords',...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31411)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in the securityfipsdecrypt file in libfreerdp/core/security.c in versions of FreeRDP prior to 2.1.1. The vulnerability stems from a network system or product...
DEBIAN-CVE-2020-13397
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds OOB read vulnerability has been detected in securityfipsdecrypt in libfreerdp/core/security.c due to an uninitialized value...
CVE-2020-9069
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than...
PT-2020-20470
Name of the Vulnerable Software and Affected Versions Anne-AL00 versions earlier than 9.1.0.331C675E9R1P3T8 Berkeley-L09 versions earlier than 10.0.1.1C675R1 CD16-10 versions earlier than 10.0.2.8 CD17-10 versions earlier than 10.0.2.8 CD17-16 versions earlier than 10.0.2.8 CD18-10 versions earli...
CVE-2020-9069: Undefined Security Weakness
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than...
PT-2020-13519
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.1 Description An out-of-bounds read issue has been detected in the security fips decrypt function in libfreerdp/core/security.c due to an uninitialized value. This issue affects the security of the software...
CVE-2020-12142
IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative...
Design/Logic Flaw
IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative...
