IBM WebSphere Application Server WS-Security XML Encryption Weakness Vulnerability

The host is running IBM WebSphere Application Server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasxmlencryptioninfodisclosurevuln.nasl 7006 2017-08-25 11:51:20Z teissa $ IBM WebSphere Application Server WS-Security XML Encryption Weakness...

IBM WebSphere Application Server WS-Security XML Encryption Weakness Vulnerability (May 2011)

IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a 1 JAX-RPC or 2 JAX-WS Web Services request via unspecified vectors related to a "decryption...

Design/Logic Flaw

RIM BlackBerry Desktop Software 4.7 through 6.0 for PC, and 1.0 for Mac, uses a weak password to encrypt a database backup file, which makes it easier for local users to decrypt the file via a brute force attack...

CVE-2010-2603

RIM BlackBerry Desktop Software 4.7 through 6.0 for PC, and 1.0 for Mac, uses a weak password to encrypt a database backup file, which makes it easier for local users to decrypt the file via a brute force attack...

Multiple Sourcefire weak encryption vulnerability

Same private key is used in all devices...

RHEL 4 : Satellite Server (RHSA-2008:0630)

Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. During an internal security...

RHEL 4 : Satellite Server (RHSA-2008:0261)

Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. During an internal...

CVE-2009-0209

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors...

Ubuntu Update for openvpn vulnerability USN-612-3

Ubuntu Update for Linux kernel vulnerabilities USN-612-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN6123.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openvpn vulnerability USN-612-3 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-612-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TYPO3多个远程安全漏洞

BUGTRAQ ID: 33376 Typo3是开源内容管理系统（CMS）和内容管理框架（CMF）。 Typo3的实现上存在多个远程安全漏洞，可能导致用户控制Typo3或运行其上的操作系统。包括： 1. 创建弱的加密密钥 2. 认证绕过 3. 不安全的会话管理 4. 跨站脚本执行 5. 远程命令执行 TYPO3版本低于4.0.10、4.1.8、4.2.4的软件受漏洞影响。 TYPO3 TYPO3 ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://typo3.org/...

PT-2009-1004 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions 4.0.0 through 4.0.9 TYPO3 versions 4.1.0 through 4.1.7 TYPO3 versions 4.2.0 through 4.2.3 Description: The issue allows attackers to compromise the confidentiality, integrity, and availability of protected information. It can b...

Default credentials

Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password via a brute-force attack...

Gentoo Security Advisory GLSA 200603-15 (crypt-cbc)

The remote host is missing updates announced in advisory GLSA 200603-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Design/Logic Flaw

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier is affected. The issue is the use of weak password encryption (ROT-25), which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl_pack registry value. No patch/versioned fix is specified in the provided documents. ...