Lucene search
+L

30118 matches found

Cvelist
Cvelist
•added 2024/10/18 9:00 p.m.•38 views

CVE-2024-10128 Topdata Inner Rep Plus WebServer td.js.gz risky encryption

A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been rated as problematic. Affected by this issue is some unknown functionality of the file td.js.gz. The manipulation leads to risky cryptographic algorithm. The attack may be launched remotely. The exploit has been...

5.1CVSS0.0037EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/10/18 9:00 p.m.•21 views

CVE-2024-10128 Topdata Inner Rep Plus WebServer td.js.gz risky encryption

A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been rated as problematic. Affected by this issue is some unknown functionality of the file td.js.gz. The manipulation leads to risky cryptographic algorithm. The attack may be launched remotely. The exploit has been...

5.1CVSS4.8AI score0.0037EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/10/18 12:00 a.m.•19 views

Topdata Inner Rep Plus WebServer encryption vulnerability

Topdata Inner Rep Plus WebServer is an application from Topdata Corporation. An encryption issue vulnerability exists in Topdata Inner Rep Plus WebServer version 2.01 that stems from the use of a risky encryption algorithm...

5.1CVSS5.3AI score0.0037EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/10/18 12:00 a.m.•21 views

Cisco UCS Central Software Configuration Backup Information Disclosure (cisco-sa-ucsc-bkpsky-TgJ5f73J)

According to its self-reported version, Cisco UCS Central Software Configuration Backup Information Disclosure is affected by a vulnerability. - A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive information...

6.3CVSS6.5AI score0.00111EPSS
SaveExploits0References4
NVD
NVD
•added 2024/10/17 1:15 p.m.•63 views

CVE-2023-6728

Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...

3.3CVSS0.00071EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/17 12:16 p.m.•28 views

CVE-2023-6728 Nokia SR OS: BOF File Encryption Vulnerability

Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...

5.9AI score0.00071EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/17 12:16 p.m.•83 views

CVE-2023-6728 Nokia SR OS: BOF File Encryption Vulnerability

Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...

0.00071EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/17 12:16 p.m.•114 views

CVE-2023-6728

The Nokia SR OS is vulnerable to a brute force attack due to inadequate encryption strength in the bof.cfg file. An attacker in possession of the encrypted file can decrypt it to obtain the BOF configuration content , which may lead to sensitive data exposure. This vulnerability affects versions ...

3.3CVSS5.9AI score0.00071EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/17 12:00 a.m.•21 views

PT-2024-15061 · Nokia · Nokia Sr Os

Name of the Vulnerable Software and Affected Versions: Nokia SR OS affected versions not specified Description: The Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack, allowing an attacker in possession of the encrypted file to decrypt it and obtain the BOF configuration...

3.3CVSS6.7AI score0.00071EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/17 12:00 a.m.•6 views

CVE-2023-6728: Inadequate Encryption Strength

Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...

3.3CVSS5.9AI score0.00071EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/10/16 5:15 p.m.•25 views

CVE-2024-20280

A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive information that is stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method that is used fo...

6.3CVSS6.5AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/16 5:15 p.m.•42 views

CVE-2024-20280

A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive information that is stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method that is used fo...

6.3CVSS0.00111EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/16 4:15 p.m.•52 views

CVE-2024-20280 Cisco UCS Central Software Configuration Backup Static Key Vulnerability

A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive information that is stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method that is used fo...

6.3CVSS0.00111EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/16 4:15 p.m.•77 views

CVE-2024-20280

CVE-2024-20280 affects Cisco UCS Central Software backup feature. The root cause is a weakness in the encryption method using a static key for backup configuration, allowing an attacker with access to a backup file to learn sensitive information stored in full state and configuration backups. Aff...

6.3CVSS6.5AI score0.00111EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/16 4:15 p.m.•20 views

CVE-2024-20280 Cisco UCS Central Software Configuration Backup Static Key Vulnerability

A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive information that is stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method that is used fo...

6.3CVSS6.5AI score0.00111EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/10/16 4:00 p.m.•61 views

Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability

A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive information that is stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method that is used fo...

6.3CVSS6.5AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/16 2:15 p.m.•59 views

CVE-2024-22032

A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When reconciling, the Kube API secret values are written in plaintext on the AppliedSpec. Cluster owners, Cluster members, and Project members for projects...

7.1CVSS0.00377EPSS
SaveExploits0References2
Mend
Mend
•added 2024/10/16 1:26 p.m.•18 views

CVE-2024-22032

A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When reconciling, the Kube API secret values are written in plaintext on the AppliedSpec. Cluster owners, Cluster members, and Project members for projects...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/10/16 1:26 p.m.•24 views

CVE-2024-22032 Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec

A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When reconciling, the Kube API secret values are written in plaintext on the AppliedSpec. Cluster owners, Cluster members, and Project members for projects...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/10/16 1:26 p.m.•22 views

CVE-2024-22032 Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec

A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When reconciling, the Kube API secret values are written in plaintext on the AppliedSpec. Cluster owners, Cluster members, and Project members for projects...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits0References4
Rows per page
Query Builder