2013 matches found
CVE-2020-23162: Use of a Broken or Risky Cryptographic Algorithm
Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials...
PT-2021-10848
Name of the Vulnerable Software and Affected Versions Pyrescom Termod4 versions prior to 10.04k Description The issue concerns sensitive information disclosure and weak encryption, allowing remote attackers to read a session-file and obtain plain-text user credentials. Recommendations For version...
PT-2021-5472
Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to the use of weak encryption algorithms in the firmware of Ethernet modules. This could allow a remote attacker to gain full access to the device with...
CVE-2019-4160: Inadequate Encryption Strength
IBM Security Guardium Data Encryption GDE 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577...
IBM Emptoris Strategic Supply Management Platform Weak Encryption Algorithm Vulnerability
The IBM Emptoris Strategic Supply Management Platform is the public portal to the Emptoris suite of products. A weak cryptographic algorithm vulnerability exists in IBM Emptoris Strategic Supply Management Platform 10.1.3. An attacker could exploit this vulnerability to decrypt highly sensitive...
VulnCheck KEV: CVE-2017-1000486
Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution...
CmtViewer Encryption
The vulnerability of the CmtViewer application for controlling programmable panels is related to the use of a less secure encryption algorithm. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the data transmitted over the network, decrypt it, and gain full...
CmtViewer Encryption Weakness Password Disclosure
The vulnerability of the CmtViewer application for controlling programmable panels is related to the use of a less secure encryption algorithm. Exploiting this vulnerability could allow an attacker to obtain the password through brute-force hashing...
Design/Logic Flaw
An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. It relies on broken encryption with a weak and guessable static encryption key...
CVE-2020-11719: Use of Hard-coded Credentials
An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. It relies on broken encryption with a weak and guessable static encryption key...
PT-2020-12805
Name of the Vulnerable Software and Affected Versions Programi Bilanc versions prior to build 007 release 014 31.01.2020 Description An issue was discovered that relies on broken encryption with a weak and guessable static encryption key. Recommendations For versions prior to build 007 release 01...
Input validation
AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted...
Schneider Electric Modicon M221 Security Breach
The Schneider Electric Modicon M221 is a programmable logic controller from Schneider Electric, France. The Schneider Electric Modicon M221 suffers from a security vulnerability that stems from an insufficient encryption strength of the device, which can be exploited by an attacker to compromise ...
IBM Cloud Pak for Security Weak Encryption Algorithm Vulnerability
IBM Cloud Pak for Security is an integrated security tool that uses a unified interface to provide deep insight into threats in hybrid multi-cloud environments. A weak cryptographic algorithm vulnerability exists in IBM Cloud Pak for Security 1.3.0.1. The vulnerability stems from the product usin...
IBM Cloud Pak for Security 加密问题漏洞
IBM Cloud Pak for Security is an integrated security tool that uses a unified interface to provide deep insight into threats in hybrid multi-cloud environments. A weak cryptographic algorithm vulnerability exists in IBM Cloud Pak for Security 1.3.0.1. The vulnerability stems from the product usin...
IBM Sterling B2B Integrator Standard Edition Weak Encryption Algorithm Vulnerability
IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. A weak cryptographic algorithm vulnerability exists in IBM Sterling B2B Integrator Standard Edition 5.2.0.0 - 6.0.3.2. An attacker could exploit this...
Nibiru ransomware variant decryptor
Nikhil Hegde developed this tool. Weak encryptionThe Nibiru ransomware is a .NET-based malware family. It traverses directories in the local disks, encrypts files with Rijndael-256 and gives them a .Nibiru extension. Rijndael-256 is a secure encryption algorithm. However, Nibiru uses a hard-coded...
CVE-2020-28638
askpassword in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb W Detected DISPLAY, but only pinentry-curses is found." as the encryption key...
CVE-2020-8761
Inadequate encryption strength in subsystem for IntelR CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2020-11487
NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware versions prior to 1.06.06 and all DGX A100 Servers with all BMC firmware versions, contains a vulnerability in the AMI BMC firmware in which the use of a hard-coded RSA 1024 key with weak ciphers may le...