Lucene search
+L

204 matches found

ATTACKERKB
ATTACKERKB
added 2022/04/11 7:15 p.m.5 views

CVE-2022-29035

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations...

4CVSS5.8AI score0.00596EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/04/11 7:15 p.m.21 views

Design/Logic Flaw

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations...

4CVSS4.2AI score0.00596EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/11 6:12 p.m.24 views

CVE-2022-29035

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations...

3.3CVSS4.5AI score0.00596EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/11 6:12 p.m.83 views

CVE-2022-29035

JetBrains Ktor Native prior to version 2.0.0 is affected by a weakness in nonce generation where random values were not produced using SecureRandom. The connected documents confirm the root cause but do not provide detailed vulnerability specifics or explicit remediation beyond the product versio...

4CVSS4.1AI score0.00596EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/04/11 6:12 p.m.22 views

CVE-2022-29035

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations...

3.3CVSS7AI score0.00596EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/04/11 12:0 a.m.9 views

JetBrains Ktor Native 安全特征问题漏洞

JetBrains Ktor Native is an asynchronous framework for creating microservices, web applications, etc. JetBrains Ktor Native versions prior to 2.0.0 are vulnerable to a security feature that stems from the fact that random values used for random number generation are not implemented using...

4CVSS5.5AI score0.00596EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/11/24 12:0 a.m.24 views

JetBrains Ktor Licensing Issue Vulnerability

JetBrains Ktor is a web application framework from JetBrains Czech Republic. An authorization issue vulnerability exists in JetBrains Ktor prior to 1.6.4, which stems from improper implementation of nonce authentication in the OAuth2 authentication process. No detailed vulnerability details are...

7.5CVSS2AI score0.00836EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/09 3:15 p.m.25 views

CVE-2021-43203

In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...

7.5CVSS0.00836EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/09 3:15 p.m.24 views

CVE-2021-43203

In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...

7.5CVSS7.1AI score
SaveExploits0References1
Prion
Prion
added 2021/11/09 3:15 p.m.22 views

Authentication flaw

In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...

5CVSS7.7AI score0.00836EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/09 3:15 p.m.5 views

CVE-2021-43203

In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...

7.5CVSS7.1AI score0.00836EPSS
SaveExploits0References2
CVE
CVE
added 2021/11/09 2:52 p.m.57 views

CVE-2021-43203

CVE-2021-43203 affects JetBrains Ktor prior to 1.6.4, where nonce verification in the OAuth2 authentication flow is implemented improperly. This can undermine the integrity of the OAuth2 nonce check, exposing an authentication risk as described in multiple sources (Red Hat and CNVD mirrors) and s...

7.5CVSS7.7AI score0.00836EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/09 2:52 p.m.30 views

CVE-2021-43203

In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...

8.4AI score0.00836EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.8 views

JetBrains Ktor framework 授权问题漏洞

JetBrains Ktor is a web application framework from JetBrains Czech Republic. An authorization issue vulnerability exists in JetBrains Ktor prior to 1.6.4, which stems from improper implementation of nonce authentication in the OAuth2 authentication process. No detailed vulnerability details are...

7.5CVSS5.6AI score0.00836EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/02/05 12:0 a.m.6 views

Unspecified vulnerability in Jetbrains JetBrains Ktor framework

JetBrains Ktor framework is a Web application framework from the Czech company JetBrains Jetbrains. A security vulnerability exists in JetBrains Ktor before 1.5.0, which stems from the fact that a birthday attack on SessionStorage keys is possible. No details of the vulnerability are provided at...

5.3CVSS6.8AI score0.00541EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/05 12:0 a.m.14 views

JetBrains Ktor Default Configuration Issue Vulnerability

JetBrains Ktor is a web application framework from the Czech company JetBrains. A default configuration issue vulnerability exists in versions of JetBrains Ktor prior to 1.4.2, which stems from the fact that the weak password suite is enabled by default. No details of the vulnerability are provid...

5.3CVSS6.7AI score0.00541EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/04 12:0 a.m.9 views

JetBrains Ktor HTTP Request Smuggling Vulnerability

Ktor is a framework for quickly creating web applications using the Kotlin language . An HTTP request smuggling vulnerability exists in JetBrains Ktor versions prior to 1.4.3. No detailed vulnerability details are provided at this time...

5.3CVSS6.7AI score0.00809EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/03 4:15 p.m.22 views

CVE-2021-25763

In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...

5.3CVSS0.00541EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/03 4:15 p.m.22 views

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

5.3CVSS0.00809EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/03 4:15 p.m.25 views

CVE-2021-25761

In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...

5.3CVSS0.00541EPSS
SaveExploits0References2
Rows per page
Query Builder