UBUNTU-CVE-2012-2130

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys...

CVE-2012-2130

CVE-2012-2130 affects PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption issue in DH and RSA key generation, leading to a Security Bypass. Public advisories (SUSE, UBuntu, Gentoo GLSA 201310-10, Gentoo NASL) confirm the same vector and impact across multiple distributions. The root cause is...

CVE-2012-2130: Inadequate Encryption Strength

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys...

PT-2019-6756

Name of the Vulnerable Software and Affected Versions PolarSSL versions 0.99pre4 through 1.1.1 Description A security bypass issue exists due to a weak encryption error when generating Diffie-Hellman values and RSA keys. This affects the generation of secure keys, potentially compromising the...

CVE-2013-7484: Inadequate Encryption Strength

Zabbix before 5.0 represents passwords in the users table with unsalted MD5...

Philips IntelliBridge EC40 Hub and IntelliBridge EC80 Hub Encryption Issue Vulnerability

The Philips IntelliBridge EC40 Hub and IntelliBridge EC80 Hub are both monitor modules from Philips Europe. A weak encryption vulnerability exists in the Philips IntelliBridge EC40 Hub and IntelliBridge EC80 Hub, which can be exploited by an attacker to gain unauthorized access to the EC40/80 hub...

PT-2019-6323

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.2.18 Description A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. The issue...

Cryptocat Encryption Issues Vulnerabilities

Cryptocat is an open source online cryptographic chat application. A security vulnerability exists in the Socialist Millionnaire Protocol in versions prior to Cryptocat 2.0.22, which stems from a weak encryption mechanism. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2017-10356

It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store...

CVE-2019-8118

Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts...

CVE-2010-3670: Inadequate Encryption Strength

TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function...

CVE-2013-4104

Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol...

PT-2019-6924

Name of the Vulnerable Software and Affected Versions Cryptocat versions prior to 2.0.22 Description The issue concerns weak encryption in the Socialist Millionnaire Protocol. Recommendations For versions prior to 2.0.22, update to version 2.0.22 or later to resolve the issue...

CVE-2013-4104: Inadequate Encryption Strength

Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol...

IBM Cloud Orchestrator Information Disclosure Vulnerability (CNVD-2019-39207)

IBM Cloud Orchestrator is a suite of cloud management solutions from IBM in the United States. The program provides extended internal and external deployment of cloud services and application program interfaces and tools to extend the integration with existing environments and other functions. An...

Broadcom Brocade SANnav CVE-2019-16208 Weak Encryption Security Weakness

Description Broadcom Brocade SANnav is prone to a security weakness. Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks. Versions prior to Brocade SANnav 2.0 are vulnerable. Technologies Affected Broadcom Brocade SANnav...

BSA-2019-867

Security Advisory ID : BSA-2019-867 Component : SANnav Revision : 1.0 Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...

IBM Security Guardium Big Data Intelligence Encryption Issue Vulnerability

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. An encryption issue vulnerability exists in IBM Security Guardi...

Fujitsu Wireless Keyboard Set LX390 Password Problem Vulnerability

The Fujitsu Wireless Keyboard Set LX390 is a wireless keyboard from Fujitsu Japan. A security vulnerability exists in the Fujitsu Wireless Keyboard Set LX390 GK381, which arises from the program not properly encrypting 2.4 communications. An attacker could exploit this vulnerability to conduct a...

CVE-2018-2579

It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out...