461 matches found
Sonatype Nexus Repository Manager OSS/Pro 2.14.5 / 3.7.1 XSS
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Cross-Site Scripting Vulnerabilities product: Sonatype Nexus Repository Manager OSS/Pro vulnerable version: =2.14.5, =3.7.1 fixed version: 2.14.6, 3.8.0 CVE...
The vulnerability of Sonatype Nexus Repository Manager, related to the use of cryptographic algorithms containing defects, allows a perpetrator to gain access to authentication data.
The vulnerability of Sonatype Nexus Repository Manager is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user authentication data and other sensitive information...
Sonatype Nexus Repository Manager Weak Password Vulnerability
Sonatype Nexus Repository Manager is a maven repository manager. A security vulnerability exists in the LDAP integration feature in Sonatype Nexus Repository Manager 2.14.5 and earlier versions, which stems from the program's use of hard-coded CMMDwoV values to encrypt passwords. An attacker coul...
Sonatype Nexus Repository Manager 2.x Weak Password Encryption Vulnerability (Dec 2017)
Sonatype Nexus Repository Manager has a weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2017-17717
Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature...
CVE-2017-17717
CVE-2017-17717 affects Sonatype Nexus Repository Manager up to version 2.14.5. The vulnerability lies in the LDAP integration feature, which uses hard-coded CMMDwoV values to encrypt passwords, resulting in weak password encryption. Documents consistently describe the issue as a weakness in passw...
HP Version Control Repository Manager < 7.6.0 Multiple Vulnerabilities
According to its self-reported version, the HP Version Control Repository Manager VCRM application installed on the remote Windows host is prior to 7.6.0. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in OpenSSL in x509vfy.c due to improper...
HPE Version Control Repository Manager File Upload Vulnerability
HPE Version Control Repository Manager VCRM is a repository for storing software and firmware that supports ProLiant servers from HewlettPackardEnterprise HPE, USA. A security vulnerability exists in HPE Version Control Repository Manager VCRM versions prior to 7.6. A remote attacker could exploi...
HPE Version Control Repository Manager Cross-Site Request Forgery Vulnerability
HPE Version Control Repository Manager VCRM is a repository for storing software and firmware that supports ProLiant servers from HewlettPackardEnterprise HPE, USA. A cross-site request forgery vulnerability exists in HPE Version Control Repository Manager VCRM versions prior to 7.6. A remote...
HPE Version Control Repository Manager Information Disclosure Vulnerability
HPE Version Control Repository Manager VCRM is a repository for storing software and firmware that supports ProLiant servers from HewlettPackardEnterprise HPE, USA. An information disclosure vulnerability exists in HPE Version Control Repository Manager versions prior to 7.6. A remote attacker...
Sonatype Nexus Repository Manager Java Object Deserialization RCE
The Sonatype Nexus Repository Manager server application running on the remote host is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit...
Sonatype Nexus Repository Manager Detection
Binary data sonatypenexusdetect.nbin...
HP Version Control Repository Manager < 7.5.0 Multiple Vulnerabilities (HPSBMU03396) (FREAK)
The version of HP Version Control Repository Manager VCRM installed on the remote Windows host is prior to 7.5.0. It is, therefore, affected by multiple vulnerabilities : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows...
HP Version Control Repository Manager Linux Detection (credentialed check)
HP Version Control Repository Manager, a software version management application, is installed on the remote Linux host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid85804; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/09"...
HP Version Control Repository Manager Buffer Overflow Vulnerability
HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. A buffer overflow vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. This could allow an authenticated remote user to modify data via...
HP Version Control Repository Manager Denial of Service Vulnerability
HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. A denial of service vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. This could allow an authenticated remote user to execute arbitrary...
HP Version Control Repository Manager Cross-Site Request Forgery Vulnerability
HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. A cross-site request forgery vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to hijack the...
HP Version Control Repository Manager Information Disclosure Vulnerability (CNVD-2015-05736)
HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. An information disclosure vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to obtain sensitive...
