683 matches found
Amazon Linux: Security Advisory (ALAS-2012-94)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Rational Test Workbench and Rational Test Virtualization Server Validation Bypass Vulnerability
IBM Rational Test Workbench and Rational Test Virtualization Server are both IBM software for creating, modifying, and deploying applications and providing testing capabilities functional testing, regression testing, load testing, etc.. The former is used for enterprise applications; the latter i...
Authentication flaw
Rational Test Control Panel in IBM Rational Test Workbench and Rational Test Virtualization Server 8.0.0.x before 8.0.0.5, 8.0.1.x before 8.0.1.6, 8.5.0.x before 8.5.0.4, 8.5.1.x before 8.5.1.5, 8.6.0.x before 8.6.0.4, and 8.7.0.x before 8.7.0.2 uses the MD5 algorithm for password hashing, which...
CVE-2015-1913
CVE-2015-1913 affects IBM Rational Test Control Panel within Rational Test Workbench and Rational Test Virtualization Server. The root cause is the use of MD5 hashing for user passwords, enabling easier authentication bypass via unspecified vectors. Affected versions include 8.0.0.x (before 8.0.0...
PT-2016-08: Weak Password Hashing in ABB PCM600
The specialists of the Positive Research center have detected a Weak password hashing vulnerability in ABB PCM600. A Main Application Password in the "ACTConfig" configuration file hashed by the weak function with the hardcoded key and the initialization vector. It is easy to decrypt the password...
Inductive Automation Ignition Multiple Vulnerabilities
Binary data scadainductiveautomationignitionICSA-15-090-01.nbin...
PostgreSQL Insecure Hash Password Vulnerability
PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. PostgreSQL has a security vulnerability. The...
MediaWiki Denial of Service Vulnerability (CNVD-2015-02420)
MediaWiki is a Wiki program. A security vulnerability exists in MediaWiki version 1.24.x before 1.24.2. When the program uses the PBKDF2 algorithm to generate hashed passwords, a remote attacker can exploit the vulnerability to cause a denial of service CPU consumption with the help of extra-long...
CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
DEBIAN-CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
Default credentials
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
UBUNTU-CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
CVE-2015-0995
Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a brute-force attack...
[SECURITY] Fedora 20 Update: jBCrypt-0.4-1.fc20
A Java implementation of OpenBSD's Blowfish password hashing code...
[SECURITY] Fedora 21 Update: jBCrypt-0.4-1.fc21
A Java implementation of OpenBSD's Blowfish password hashing code...
[SECURITY] Fedora 22 Update: jBCrypt-0.4-1.fc22
A Java implementation of OpenBSD's Blowfish password hashing code...
Vulnerability in the jBCrypt key stretching process
Overview jBCrypt is a Java implementation to compute password hashes. jBCrypt contains an integer overflow vulnerability in the key stretching process. An integer overflow occurs when the parameter for the repetition count is set to the maximum value allowed, 31. Norito AGETSUMA reported this...