Lucene search
+L

82 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•5 views

CVE-2022-29229: Missing Cryptographic Step

CaSS is a Competency and Skills System. CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, whic...

7.2CVSS7AI score0.0035EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/18 12:00 a.m.•7 views

PT-2022-19480

Name of the Vulnerable Software and Affected Versions CaSS Library versions prior to 1.5.8 Description CaSS Library has a missing cryptographic step when storing cryptographic keys, allowing a server administrator access to an account's cryptographic keys. This issue affects CaSS servers using...

7.2CVSS0.0035EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/14 12:00 a.m.•7 views

CVE-2022-1279: Missing Cryptographic Step

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...

7.5CVSS7.1AI score0.00368EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/29 12:00 a.m.•5 views

CVE-2021-22946: Missing Cryptographic Step

A user can tell curl = 7.20.0 and = 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server --ssl-reqd on the command line orCURLOPTUSESSL set to CURLUSESSLCONTROL or CURLUSESSLALL withlibcurl. This requirement could be bypassed if the server would return a...

7.5CVSS5.8AI score0.04539EPSS
SaveExploits1References4
NVD
NVD
•added 2021/08/04 1:15 p.m.•37 views

CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

5.3CVSS0.0046EPSS
SaveExploits1References2
OSV
OSV
•added 2021/08/04 1:15 p.m.•28 views

CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

4.9CVSS6.7AI score
SaveExploits0References2
Prion
Prion
•added 2021/08/04 1:15 p.m.•36 views

Design/Logic Flaw

showdoc is vulnerable to Missing Cryptographic Step...

4CVSS5AI score0.0046EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/08/04 1:15 p.m.•11 views

CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

5.3CVSS6AI score0.0046EPSS
SaveExploits1References3
Mend
Mend
•added 2021/08/04 12:50 p.m.•1 views

CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

6.8CVSS0.0046EPSS
SaveExploits1References5
CVE
CVE
•added 2021/08/04 12:50 p.m.•131 views

CVE-2021-3680

CVE-2021-3680 relates to showdoc and centers on a missing cryptographic step due to a hardcoded salt in the user password hash function. Documents from GHSA-8VH3-29MR-M9XG and PT-2021-21367 confirm this flaw and describe the use of a fixed salt, implying weaknesses in password hashing. No concret...

5.3CVSS5.8AI score0.0046EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/04 12:00 a.m.•6 views

CVE-2021-3680: Missing Cryptographic Step

showdoc is vulnerable to Missing Cryptographic Step...

5.3CVSS5.8AI score0.0046EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/07/09 7:15 p.m.•11 views

CVE-2021-26100

A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the encrypted messages to manipulate them in such a way that makes the tampering and the recovery of the plaintexts possible...

7.5CVSS6.7AI score0.00342EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2021/07/01 12:15 p.m.•20 views

CVE-2020-9158

There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr...

7.5CVSS5.8AI score0.00677EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/07/01 12:15 p.m.•11 views

CVE-2020-9158

There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr...

7.5CVSS7.2AI score0.00677EPSS
SaveExploits0References2
Prion
Prion
•added 2021/07/01 12:15 p.m.•31 views

Information disclosure

There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr...

5CVSS7.5AI score0.00677EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2021/07/01 11:21 a.m.•48 views

CVE-2020-9158

There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr...

7.6AI score0.00677EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/01 12:00 a.m.•6 views

CVE-2020-9158: Undefined Security Weakness

There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr...

7.5CVSS5.8AI score0.00677EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/07/01 12:00 a.m.•5 views

PT-2021-12839

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to a Missing Cryptographic Step, which may lead to a Denial of Service DoS of Samgr when successfully exploited. Recommendations: At the moment, there is no...

7.5CVSS0.00677EPSS
SaveExploits0References3
OSV
OSV
•added 2019/09/18 11:15 p.m.•15 views

CVE-2019-3738

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key...

6.5CVSS6.8AI score0.01681EPSS
SaveExploits0References8
Prion
Prion
•added 2019/09/18 11:15 p.m.•30 views

Design/Logic Flaw

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key...

4.3CVSS7.6AI score0.01681EPSS
SaveExploits0References8Affected Software16
Rows per page
Query Builder