Lucene search
+L

1144 matches found

Positive Technologies
Positive Technologies
•added 2022/09/20 12:00 a.m.•23 views

PT-2022-22313 · Zyxel · Zyxel Gs1900

Name of the Vulnerable Software and Affected Versions: Zyxel GS1900 series firmware versions prior to V2.70 Description: An insufficient entropy issue, caused by the improper use of randomness sources with low entropy for RSA key pair generation, affects the web administration interface. This cou...

5.9CVSS5.7AI score0.00384EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/20 12:00 a.m.•6 views

CVE-2022-34746: Insufficient Entropy

An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior to V2.70. This vulnerability could allow an unauthenticated attacker to retrieve a private key by factoring...

5.9CVSS6.1AI score0.00384EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/09/15 3:15 p.m.•8 views

CVE-2022-40306

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

5.9CVSS6.3AI score0.01268EPSS
SaveExploits1References4
NVD
NVD
•added 2022/09/15 3:15 p.m.•31 views

CVE-2022-40306

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

5.9CVSS0.01268EPSS
SaveExploits1References3
Prion
Prion
•added 2022/09/15 3:15 p.m.•33 views

Design/Logic Flaw

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout through 2022-06-27 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

2.6CVSS5.6AI score0.01268EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/09/15 2:03 p.m.•44 views

CVE-2022-40306

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

5.9AI score0.01268EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/09/15 12:00 a.m.•18 views

ECi Software Solutions Printanista Hub 安全漏洞

ECi Software Solutions Printanista Hub is a hosted print service software from ECi Software Solutions. A security vulnerability exists in ECi Software Solutions Printanista Hub versions prior to 2022-06-27 that stems from the login form/Login performing an expensive RSA key generation operation,...

5.9CVSS6AI score0.01268EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/09/15 12:00 a.m.•15 views

PT-2022-25339 · Eci · Eci Printanista Hub

Name of the Vulnerable Software and Affected Versions: ECi Printanista Hub formerly FMAudit Printscout versions prior to 5.5.2 Description: The login form "/Login" performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form...

5.9CVSS7.1AI score0.01268EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/15 12:00 a.m.•4 views

CVE-2022-40306: Undefined Security Weakness

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

5.9CVSS6.2AI score0.01268EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2022/09/12 12:00 a.m.•12 views

The vulnerability of the python-cryptography package, a programming language interpreter for Python, allows attackers to gain unauthorized access to protected information.

The vulnerability of the python-cryptography package, a programming language interpreter for Python, is related to errors in RSA key management. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.8CVSS6.9AI score0.02463EPSS
SaveExploits0References10Affected Software10
attackerkb
attackerkb
•added 2022/09/02 12:15 p.m.•17 views

CVE-2021-35135

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

6.2CVSS6.1AI score0.00112EPSS
SaveExploits0References2
NVD
NVD
•added 2022/09/02 12:15 p.m.•33 views

CVE-2021-35135

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

6.2CVSS0.00112EPSS
SaveExploits0References1
Prion
Prion
•added 2022/09/02 12:15 p.m.•29 views

Null pointer dereference

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

1.7CVSS5.7AI score0.00112EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/09/02 11:31 a.m.•42 views

CVE-2021-35135

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

6.2CVSS6.7AI score0.00112EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/02 11:31 a.m.•103 views

CVE-2021-35135

CVE-2021-35135 describes a null pointer dereference that may occur during RSA key import in Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The CVE is tied to Qualcomm closed-source components; vulnerability impact is li...

6.2CVSS5.7AI score0.00112EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/02 12:00 a.m.•31 views

PT-2022-10448 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: A null pointer dereference may potentially occur during RSA key import in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon...

6.2CVSS5.5AI score0.00112EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/02 12:00 a.m.•3 views

CVE-2021-35135: NULL Pointer Dereference

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

6.2CVSS5.8AI score0.00112EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2022/08/12 8:14 a.m.•444 views

Cisco Patches High-Severity Vulnerability Affecting ASA and Firepower Solutions

Cisco on Wednesday released patches to contain multiple flaws in its software that could be abused to leak sensitive information on susceptible appliances. The issue, assigned the identifier CVE-2022-20866 CVSS score: 7.4, has been described as a "logic error" when handling RSA keys on devices...

9.3CVSS6.3AI score0.49294EPSS
SaveExploits8
attackerkb
attackerkb
•added 2022/08/10 11:00 p.m.•15 views

CVE-2022-20866

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key...

7.5CVSS7.2AI score0.17876EPSS
SaveExploits0References2
NVD
NVD
•added 2022/08/10 5:15 p.m.•43 views

CVE-2022-20866

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key...

7.5CVSS0.17876EPSS
SaveExploits0References1
Rows per page
Query Builder