CVE-2017-5186

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 9.0.2.2 use the deprecated MD5 hashing algorithm in a communications certificate...

CVE-2017-5186

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 9.0.2.2 use the deprecated MD5 hashing algorithm in a communications certificate...

CVE-2017-5186

CVE-2017-5186 affects Novell iManager and NetIQ eDirectory (versions listed in the CVE) and is due to the use of the deprecated MD5 hashing algorithm in a communications certificate. The connected SUSE entry reiterates the same affected products and patch level references. The provided sources do...

CVE-2017-5186

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 9.0.2.2 use the deprecated MD5 hashing algorithm in a communications certificate...

Alerton Webtalk 2.5 / 3.3 Hash Disclosure / CSRF / Command Injection

Security Issues in Alerton Webtalk ================================== Introduction ------------ Vulnerabilities were identified in the Alerton Webtalk Software supplied by Alerton. This software is used for the management of building automation systems. These were discovered during a black box...

Weblate: No Password Length Restriction leads to Denial of Service

Hi Weblate, I am trying to register for an account when I came across a page where the password was required to be set up. The url is https://demo.weblate.org/accounts/password where the password was to be created after one provides his or her initial details. There is no limit to the length of t...

Collision Attack

mongo-java-driver is vulnerable to collision attacks. These attacks are possible because it is using a non-collision resistant hashing algorithm, MD5, in GridFSUploadStreamImpl.java to generate the digest of uploaded files. Note: Developers have mentioned this is a non-issue...

Insecure Cipher

requests uses an insecure cipher. The library uses the SHA1 hashing algorithm by default which was shown to be compromised with the SHA1 shatter attack. The library also does not offer any alternate hashing algorithm...

Denial Of Service (DoS)

sentry is vulnerable to denial of service DoS attacks. It fails to validate and limit the maximum password length, attackers can launch DoS by exhausting the resources after entering tons of data to the password hashing algorithm...

Novell eDirectory Multiple Vulnerabilities (Mar 2017)

Novell / NetIQ eDirectory is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netiq:edirectory"...

Cryptographic Hash Collision Attack

gateway is vulnerable to collision attack. The vulnerability is possible because it uses weak hashing algorithm, SHA-1, for HashedCredentialsMatcher, allowing the attackers to easily perform collsion attacks...

Insecure Password Hashing

fh-wfm-user currently uses SHA-1 to hash passwords. This is an insecure algorithm and was deprecated by the National Institute of Standards and Technology NIST in 2011...

The vulnerability of the iOS operating system, which allows a hacker to facilitate the process of file decryption

The vulnerability of the iTunes Backup component in the iOS operating system is related to incorrect hashing of passwords. Exploiting this vulnerability can allow a malicious actor to facilitate the decryption process for files remotely...

CVE-2016-2879

IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference : 1997341...

CVE-2016-2879

IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference : 1997341...

Design/Logic Flaw

IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference : 1997341...

CVE-2016-2879

IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference : 1997341...

CVE-2016-2879

IBM QRadar SIEM (7.2.x) is affected by CVE-2016-2879 due to the use of outdated hashing algorithms for certain passwords, potentially allowing a local attacker to obtain and decrypt credentials. Affected versions: QRadar 7.2.0–7.2.7. Remediation: upgrade to QRadar 7.2.8 (or other fixed release). ...

CVE-2016-4685

An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "iTunes Backup" component, which improperly hashes passwords, making it easier to decrypt files...

CVE-2016-4685

An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "iTunes Backup" component, which improperly hashes passwords, making it easier to decrypt files...