CVE-2021-41119 DoS vulnerabiliity in wire-server json parser

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

CVE-2021-41119 DoS vulnerabiliity in wire-server json parser

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

CVE-2021-41119

Removed by vendor...

The vulnerability of the PAN-OS operating system, related to insufficient calculation of password hashes, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PAN-OS operating system is related to insufficient calculation of password hashes. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the microprogrammed software of the MELSEC iQ-F Series FX5U and MELSEC iQ-F Series FX5UJ programmable logic controllers lies in the use of a reversible one-way hash function. This function allows an intruder to gain unauthorized access to protected information.

The vulnerability of the microprogrammed logic controllers MELSEC iQ-F Series FX5U and MELSEC iQ-F Series FX5UJ lies in the use of a weak password hash. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the microprogrammed software of the MELSEC iQ-F Series FX5U and MELSEC iQ-F Series FX5UJ programmable logic controllers lies in the use of a password hash instead of a plain text password for authentication. This allows attackers to disclose sensitive information or compromise data integrity.

The vulnerability of the microprogrammed logic controllers MELSEC iQ-F Series FX5U and MELSEC iQ-F Series FX5UJ lies in the use of a password hash instead of a plain password for authentication. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive...

Description of the security update for Office Online Server: April 12, 2022 (KB5002162)

None None...

Description of the security update for Office Web Apps Server 2013: April 12, 2022 (KB5002169)

None None...

Description of the security update for Office 2013: April 12, 2022 (KB5002148)

Description of the security update for Office 2013: April 12, 2022 KB5002148 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-26901. Note: To apply this...

Description of the security update for Excel 2013: April 12, 2022 (KB5002175)

Description of the security update for Excel 2013: April 12, 2022 KB5002175 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-26901. Note: To apply this...

CVE-2022-28000

creationtimestamp| type| source ---|---|--- 2022-04-08 12:38:27+00:00| seen| https://t.me/cibsecurity/40368...

The vulnerability of microprogramming software in embedded Qualcomm Android operating systems, related to data type conversion errors, allows attackers to escalate their privileges.

The vulnerability of microprogramming software in embedded Qualcomm Android operating systems is related to errors in data type conversion during the verification of file hash segments. Exploiting this vulnerability can allow attackers to enhance their privileges using a specially created malicio...

CVE-2021-26113

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

CVE-2021-26113

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

CVE-2021-26113

CVE-2021-26113 affects Fortinet FortiWAN prior to 4.5.9. The issue is a vulnerability in the password hashing process: a one‑way hash is used with a predictable salt (CWE-760). If an attacker has obtained the password file, they may be able to guess stored passwords. No exploitation details are p...

CVE-2021-26113

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

CVE-2021-26113

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

Weak password hash in LiveHelperChat

The secrethash, which the application relies for multiple security measures, can be brute-forced. The hash is quite small, with only 10 characters of only hexadecimal, making 16^10 possilibities 1.099.511.627.776 . The SHA1 of the secret can be obtained via a captcha string and brute-forced offli...

GHSA-VX8V-G3P3-88VG Weak password hash in LiveHelperChat

The secrethash, which the application relies for multiple security measures, can be brute-forced. The hash is quite small, with only 10 characters of only hexadecimal, making 16^10 possilibities 1.099.511.627.776 . The SHA1 of the secret can be obtained via a captcha string and brute-forced offli...

FreeBSD-SA-22:08.zlib

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:08.zlib Security Advisory The FreeBSD Project Topic: zlib compression out-of-bounds write Category: zlib Module: contrib Announced: 2022-04-06 Credits: Danil...