833 matches found
CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
DEBIAN-CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
Default credentials
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
UBUNTU-CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...
PT-2015-5986
Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.24.x through 1.24.1 Description The issue allows remote attackers to cause a denial of service, specifically consuming CPU resources, by providing a long password when the PBKDF2 algorithm is used for password hashing...
CVE-2015-0995
Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a brute-force attack...
CVE-2015-0995: Undefined Security Weakness
Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a brute-force attack...
[SECURITY] Fedora 20 Update: jBCrypt-0.4-1.fc20
A Java implementation of OpenBSD's Blowfish password hashing code...
[SECURITY] Fedora 21 Update: jBCrypt-0.4-1.fc21
A Java implementation of OpenBSD's Blowfish password hashing code...
[SECURITY] Fedora 22 Update: jBCrypt-0.4-1.fc22
A Java implementation of OpenBSD's Blowfish password hashing code...
Vulnerability in the jBCrypt key stretching process
Overview jBCrypt is a Java implementation to compute password hashes. jBCrypt contains an integer overflow vulnerability in the key stretching process. An integer overflow occurs when the parameter for the repetition count is set to the maximum value allowed, 31. Norito AGETSUMA reported this...
Siemens SIMATIC STEP 7 (TIA Portal) < 1300.100.2501.1 Multiple Vulnerabilities (SSA-315836)
Binary data scadasiemenstiamultiplevulnerabilitiesSSA-315836.nbin...
FancyFon FAMOC Cryptographic Hash Algorithm Vulnerability
FancyFon FAMOC is a mobile device management platform. FancyFon FAMOC suffers from a password hashing algorithm vulnerability that can be exploited by an attacker to conduct a brute force attack and obtain a user's password...
CVE-2014-9251
Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack on hash values in the database, aka ZEN-15413...
Cross site scripting
Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack on hash values in the database, aka ZEN-15413...
CVE-2014-9251
Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack on hash values in the database, aka ZEN-15413...
CVE-2014-9251
Zenoss Core up to 5 Beta 3 uses a weak password-hashing algorithm, enabling context-dependent attackers to obtain plaintext passwords by brute-forcing stored hashes in the database (ZEN-15413). CVSS v2 base score 5.0 (Medium) as per NVD.
PT-2014-8905
Name of the Vulnerable Software and Affected Versions Zenoss Core versions through 5 Beta 3 Description The issue makes it easier for attackers to obtain cleartext password values via a brute-force attack on hash values in the database, due to the use of a weak algorithm to hash passwords...