CVE-2014-9970

A vulnerability was found in Jasypt that would allow an attacker to perform a timing attack on password hash comparison...

DEBIAN-CVE-2012-6125

Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...

CVE-2012-6125

Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...

Design/Logic Flaw

Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...

CVE-2012-6125

Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...

CVE-2012-6125

Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...

CVE-2012-6125

Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions...

CVE-2012-6125

CVE-2012-6125 applies to CHICKEN Scheme prior to 4.8.0, where hash table collision handling enables algorithmic complexity attacks that cause O(n) symbol-table lookups. The consumer-facing effect is resource-heavy lookups potentially impacting availability and response under crafted input. Severa...

MS16-029: Description of the security update for Office 2013: March 8, 2016

MS16-029: Description of the security update for Office 2013: March 8, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Mozilla: Stack buffer overflow in HKDF output

A flaw was discovered in both Firefox and Thunderbird where 4 bytes of a HMAC output could be written past the end of a buffer stored on the memory stack. This could allow an attacker to execute arbitrary code or lead to a crash. This flaw can be exploited over the network...

The vulnerabilities of the ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c components of the SQLite database management system allow a hacker to cause a service failure.

The vulnerability of the ext/fts5/fts5hash.c and ext/fts5/fts5index.c components of the SQLite database management system is related to the use of a null pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by a Use of a One-Way Hash without a Salt vulnerability

Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4313 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG uses a one-way cryptographic hash against an input that should not be reversible, such a...

Security Bulletin: Multiple vulnerabilities in MD5 Signature and Hash Algorithm, glibc and OpenSSL affect IBM Netezza Firmware Diagnostics Tools

Summary The MD5 "Sloth" vulnerability on TLS 1.2, glibc and OpenSSL are used by IBM Netezza Firmware Diagnostics Tools. IBM Netezza Firmware Diagnostics Tools has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-7575 DESCRIPTION: The TLS protocol could allow weaker than expect...

Unspecified vulnerability in cPanel (CNVD-2019-36143)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 11.54.0.4. An attacker can exploit the vulnerability to...

AutoPi.io AutoPi Wi-Fi/NB and AutoPi 4G/LTE Brute Force Attack Vulnerabilities

AutoPi.io AutoPi Wi-Fi/NB and AutoPi 4G/LTE are both encrypted devices from the Danish company AutoPi.io. A security vulnerability exists in AutoPi.io AutoPi Wi-Fi/NB and AutoPi 4G/LTE versions prior to 2019-10-15, which stems from the fact that the default WiFi and WiFi SSIDs are both derived fr...

CVE-2019-12941

AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the device. The default WiFi password and WiFi SSID are derived from the same hash function output input i...

CVE-2019-12941

AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the device. The default WiFi password and WiFi SSID are derived from the same hash function output input i...

Default credentials

AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the device. The default WiFi password and WiFi SSID are derived from the same hash function output input i...

CVE-2019-12941

AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the device. The default WiFi password and WiFi SSID are derived from the same hash function output input i...

CVE-2019-14510

An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature creates a local account FSAdminxxxxxxxxx e.g., FSAdmin123456789 on the server that hosts the LAN Cache and all clients that are assigned to a LAN Cache. This account is placed...