Lucene search
+L

2012 matches found

securityvulns
securityvulns
•added 2006/06/09 12:00 a.m.•61 views

Mathcad Password weak encryption

Area password is stored in base64...

1.9AI score
SaveExploits0References1Affected Software1
Prion
Prion
•added 2006/05/05 12:46 p.m.•27 views

Authentication flaw

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

10CVSS7.7AI score0.02141EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2006/05/05 12:46 p.m.•27 views

CVE-2006-2206

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

10CVSS7.2AI score0.02141EPSS
SaveExploits1References3
CVE
CVE
•added 2006/05/05 10:00 a.m.•77 views

CVE-2006-2206

The CVE-2006-2206 entry concerns UltraVNC 1.0.1 whose MS-Logon scheme uses weak XOR encryption for challenge/response. This weak cryptography permits an attacker on the network to sniff credentials and decrypt passwords, enabling privilege escalation.

10CVSS7.2AI score0.02141EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2006/05/05 10:00 a.m.•40 views

CVE-2006-2206

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

7.2AI score0.02141EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/05 12:00 a.m.•8 views

CVE-2006-2206: Undefined Security Weakness

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

10CVSS5.9AI score0.02141EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2006/05/05 12:00 a.m.•52 views

Ultr@VNC weak encryption

Weak ecnryption algorithm XOR while transmitting on wire...

2.4AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2006/03/24 2:00 a.m.•36 views

CVE-2006-1378

PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator C++ rand function during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand seed values an...

6.5AI score0.00326EPSS
SaveExploits1References5
Prion
Prion
•added 2006/03/23 11:06 a.m.•28 views

Design/Logic Flaw

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...

5CVSS7.2AI score0.02269EPSS
SaveExploits0References9Affected Software1
NVD
NVD
•added 2006/03/23 11:06 a.m.•31 views

CVE-2006-0999

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...

5CVSS6.7AI score0.02269EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/03/23 12:00 a.m.•7 views

CVE-2006-0999: Undefined Security Weakness

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...

5CVSS5.9AI score0.02269EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2006/02/25 11:02 a.m.•29 views

CVE-2006-0898

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...

2.6CVSS5.9AI score0.0143EPSS
SaveExploits0References1
OSV
OSV
•added 2006/02/25 11:02 a.m.•22 views

CVE-2006-0898

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...

6.4AI score
SaveExploits0References14
Cvelist
Cvelist
•added 2006/02/25 11:00 a.m.•39 views

CVE-2006-0898

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...

9AI score0.0143EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/02/25 12:00 a.m.•6 views

CVE-2006-0898: Undefined Security Weakness

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...

2.6CVSS5.7AI score0.0143EPSS
SaveExploits0References1
Prion
Prion
•added 2006/02/08 1:02 a.m.•22 views

Code injection

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...

2.1CVSS6.7AI score0.00332EPSS
SaveExploits0References3Affected Software1
securityvulns
securityvulns
•added 2006/02/07 12:00 a.m.•166 views

PeopleSoft (Oracle) PSCipher Encryption Weakness

Vendor: PeopleSoft Product: People Tools Version: 8.4x Platform: Multi-platform Title: Weak Encryption Description: PeopleSoft uses PSCipher for encryption/hashing purposes. Based on observations from the output of PSCipher and on our familiarity with the cryptographic library objects and methods...

7AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/02/07 12:00 a.m.•44 views

Peoplesoft People Tools PSCipher() function weak encryption

Weak DES block cypher without feedback is used...

1.1AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2006/01/27 12:00 a.m.•55 views

Weak Net::SSLeay perl module encryption

/tmp/entropy file is used for entropy gathering if no entropy source is specified with EGDPATH envoronment variable. Attacker can fille file with known data...

3.3AI score
SaveExploits0References1
NVD
NVD
•added 2005/12/07 11:03 a.m.•28 views

CVE-2005-4066

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...

4.9CVSS6.5AI score0.00229EPSS
SaveExploits0References4
Rows per page
Query Builder