Lucene search
+L

14240 matches found

CNNVD
CNNVD
•added 2021/12/25 12:00 a.m.•10 views

Linux kernel加密问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that stems from an information leak in the net IPv6 output core.c in the IPv6 implementation of the Linux kernel prior to...

7.5CVSS6.6AI score0.03585EPSS
SaveExploits0References29
CNNVD
CNNVD
•added 2021/12/25 12:00 a.m.•6 views

Linux kernel 加密问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the IPv4 implementation of the Linux kernel prior to 5.12.4, where net IPv4 route.c suffers from...

3.5CVSS6.6AI score0.00368EPSS
SaveExploits0References30
CVE
CVE
•added 2021/12/23 7:48 p.m.•59 views

CVE-2021-43989

The CVE-2021-43989 issue affects mySCADA myPRO versions 8.20.0 and earlier, where passwords are stored using MD5. The underlying risk is that MD5 password hashes may be cracked, exposing credential-related data. Reported in multiple sources (NVD/NVD-derived and ICS/CISA context), the vulnerabilit...

7.5CVSS7.7AI score0.00651EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/23 12:00 a.m.•11 views

PT-2021-23996 · Myscada · Myscada Mypro

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO versions 8.20.0 and prior Description: The issue concerns the storage of passwords using MD5, which may allow an attacker to crack previously retrieved password hashes. Recommendations: For mySCADA myPRO versions 8.20.0 and prio...

7.5CVSS7.5AI score0.00651EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/22 12:00 a.m.•10 views

PT-2021-6619

Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description A NULL pointer dereference flaw was found in GnuTLS, related to the implementation of the wrap nettle hash fast function in the cryptographic library. This flaw can cause undefined behavior wh...

7.5CVSS6.9AI score0.01863EPSS
SaveExploits0References57
attackerkb
attackerkb
•added 2021/12/21 5:26 p.m.•15 views

CVE-2021-43989

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes...

7.5CVSS7.1AI score0.00651EPSS
SaveExploits0References2
ICS
ICS
•added 2021/12/21 12:00 a.m.•69 views

mySCADA myPRO

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: mySCADA Equipment: myPRO Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Use of Password Hash with Insufficient Computational Effort, Hidden Functionality, OS Command...

10CVSS10AI score0.01549EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/12/21 12:00 a.m.•12 views

mySCADA myPRO 加密问题漏洞

mySCADA myPRO is an HMI/SCADA system designed primarily for the visualization and control of industrial processes. A security vulnerability exists in mySCADA myPRO that can be exploited by an attacker to crack a previously retrieved password hash...

7.5CVSS5.6AI score0.00651EPSS
SaveExploits0References4
OSV
OSV
•added 2021/12/18 12:00 a.m.•13 views

GHSA-74XW-GWFM-7PV7 bounter Null pointer reference

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS6.7AI score0.01037EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/12/17 9:15 p.m.•7 views

CVE-2021-41497

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS7.1AI score0.01037EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/17 9:15 p.m.•13 views

CVE-2021-41497

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS5.8AI score0.01037EPSS
SaveExploits1References1
PyPA
PyPA
•added 2021/12/17 9:15 p.m.•16 views

PYSEC-2021-880

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS6.9AI score0.01037EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/12/17 9:15 p.m.•13 views

PYSEC-2021-880

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS7AI score0.01037EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/12/16 8:15 p.m.•8 views

CVE-2021-3179

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...

5.5CVSS6AI score0.00441EPSS
SaveExploits0References5
NVD
NVD
•added 2021/12/16 8:15 p.m.•23 views

CVE-2021-3179

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...

5.5CVSS0.00441EPSS
SaveExploits0References3
Prion
Prion
•added 2021/12/16 8:15 p.m.•23 views

Authentication flaw

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...

2.1CVSS5.5AI score0.00441EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/12/16 7:13 p.m.•34 views

CVE-2021-3179

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...

5.8AI score0.00441EPSS
SaveExploits0References3
CVE
CVE
•added 2021/12/16 7:13 p.m.•66 views

CVE-2021-3179

CVE-2021-3179 concerns the GGLocker iOS app, where an insecure data storage of the password hash enables an authentication bypass. The entry is corroborated by multiple sources in connected documents (NVD, Red Hat, CVE lists). Affected software: GGLocker iOS application. Underlying issue: insecur...

5.5CVSS5.5AI score0.00441EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/12/16 5:15 a.m.•16 views

UBUNTU-CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

7.5CVSS7.1AI score0.01824EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/12/16 12:00 a.m.•16 views

Suricata 安全漏洞

Suricata is a suite of network Intrusion Detection Systems IDS, Intrusion Prevention Systems IPS, and network security monitoring engines developed by the Open Information Security Foundation OISF and its supporting vendors, which supports multi-threading, built-in IPv6, and the ability to load...

7.5CVSS7.3AI score0.01824EPSS
SaveExploits1References5
Rows per page
Query Builder