Lucene search
+L

511 matches found

Fedora
Fedora
•added 2014/09/09 10:17 p.m.•34 views

[SECURITY] Fedora 20 Update: python-elixir-0.7.1-14.fc20

Elixir is a declarative layer on top of SQLAlchemy. It is a fairly thin wrapper, which provides the ability to define model objects following the Active Record design pattern, and using a DSL syntax similar to that of the Ruby on Rails ActiveRecord system. Elixir does not intend to replace...

4.3CVSS0.8AI score0.01681EPSS
SaveExploits0
NVD
NVD
•added 2012/08/26 9:55 p.m.•29 views

CVE-2012-2146

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS5.8AI score0.01681EPSS
SaveExploits0References6
Prion
Prion
•added 2012/08/26 9:55 p.m.•15 views

Design/Logic Flaw

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS6.3AI score0.01681EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2012/08/26 9:55 p.m.•21 views

PYSEC-2012-13

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS4.3AI score0.01681EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2012/08/26 9:55 p.m.•24 views

CVE-2012-2146

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS5.9AI score0.01681EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2012/08/26 9:00 p.m.•27 views

CVE-2012-2146

Removed by vendor...

4.3CVSS6.7AI score0.01681EPSS
SaveExploits0
Cvelist
Cvelist
•added 2012/08/26 9:00 p.m.•38 views

CVE-2012-2146

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

5.7AI score0.01681EPSS
SaveExploits0References6
CVE
CVE
•added 2012/08/26 9:00 p.m.•61 views

CVE-2012-2146

CVE-2012-2146 affects Elixir up to at least 0.8.0, where Blowfish in CFB mode is used without a unique initialization vector (IV). This weak IV construction can enable context-dependent users to obtain sensitive information and potentially decrypt the database. The connected documents confirm the...

4.3CVSS5.8AI score0.01681EPSS
SaveExploits0References6Affected Software1
FreeBSD
FreeBSD
•added 2012/08/26 12:00 a.m.•19 views

py39-Elixir -- weak use of cryptography

Red Hat Security Response Team reports: Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS5.7AI score0.01681EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2011/06/22 11:40 a.m.•6 views

New XSS Vulnerability found on Sony PlayStation by c7-elixir - The C7 Crew

New XSS Vulnerability found onSony PlayStation by c7-elixir - The C7 Crew YES ! Sony is still Vulnerable to various bugs like XSS. Today a hackerc7-elixir from The C7 Crew has expose new XSS attack on Sony PlayStation's Website as shown. Sony got hacked 20 times in last two months by number of...

6.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/06/22 11:40 a.m.•18 views

New XSS Vulnerability found on Sony PlayStation by c7-elixir - The C7 Crew

New XSS Vulnerability found on Sony PlayStation by c7-elixir - The C7 Crew YES ! Sony is still Vulnerable to various bugs like XSS. Today a hacker c7-elixir from The C7 Crew has expose new XSS attack on Sony PlayStation's Website as shown. Sony got hacked 20 times in last two months by number of...

6.3AI score
SaveExploits0
Rows per page
Query Builder