Lucene search
+L

149 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/04 12:00 a.m.11 views

The vulnerability of the Libgcrypt cryptographic library, which stems from the use of weak cryptographic algorithms, allows attackers to gain access to confidential information.

The vulnerability of the Libgcrypt cryptographic library lies in the use of a weak cryptographic algorithm. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to confidential information within the system...

5.9CVSS6.6AI score0.01423EPSS
SaveExploits1References7Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/01/26 2:15 a.m.10 views

CVE-2021-46559

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection...

7.5CVSS7.2AI score0.00436EPSS
SaveExploits2References2
OSV
OSV
added 2022/01/26 2:15 a.m.10 views

CVE-2021-46559

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection...

7.5CVSS7.1AI score0.00436EPSS
SaveExploits2References1
Prion
Prion
added 2022/01/26 2:15 a.m.16 views

Information disclosure

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection...

5CVSS7.5AI score0.00436EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.10 views

IBM Security Verify 加密问题漏洞

IBM Security VerifyAccess ISAM is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT, and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls,...

7.5CVSS5.6AI score0.00665EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/12/01 12:00 a.m.57 views

IBM QRadar SIEM Encryption Issue Vulnerability

IBM QRadar SIEM is a U.S.-based solution from IBM that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture and generates detailed reports on data access and user activity. IBM QRadar ha...

7.5CVSS1.5AI score0.00665EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/30 12:00 a.m.9 views

IBM Cloud Pak for Security 加密问题漏洞

IBM Cloud Pak for Security CP4S is an open security platform from IBM that connects to your existing data sources, generates deeper insights, and enables you to act faster with automation. IBM Cloud Pak for Security CP4S suffers from an encryption issue vulnerability in versions 1.7.0.0, 1.7.1.0,...

7.5CVSS6.7AI score0.00687EPSS
SaveExploits0References3
OSV
OSV
added 2021/09/01 6:35 p.m.27 views

GHSA-WWVV-X5MQ-H3JJ Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

5.3CVSS5.2AI score0.017EPSS
SaveExploits1References4
Prion
Prion
added 2021/04/26 7:15 p.m.20 views

Default credentials

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...

7.5CVSS9.6AI score0.01339EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/04/26 7:15 p.m.4 views

CVE-2021-31646

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...

9.8CVSS7AI score0.01339EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/04/26 6:07 p.m.27 views

CVE-2021-31646

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...

9.8AI score0.01339EPSS
SaveExploits0References3
OSV
OSV
added 2021/02/06 12:15 a.m.8 views

CVE-2021-22307

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/06 12:15 a.m.32 views

CVE-2021-22307

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

5.5CVSS0.00199EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/06 12:15 a.m.4 views

CVE-2021-22307

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/06 12:15 a.m.23 views

Design/Logic Flaw

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

2.1CVSS5.4AI score0.00199EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/02/06 12:00 a.m.36 views

CVE-2021-22307

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

5.7AI score0.00199EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/06 12:00 a.m.108 views

CVE-2021-22307

CVE-2021-22307 affects Huawei Mate 30 smartphones with firmware 10.0.0.203 (C00E201R7P2). The issue is a weak algorithm that leaves protection for certain modules insufficient, allowing local attackers to compromise module integrity. CVSS indicates LOCAL access, low attack complexity, with HIGH i...

5.5CVSS5.4AI score0.00199EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/02/05 12:00 a.m.13 views

Huawei Mate 30 安全漏洞

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. A weak algorithm vulnerability exists in Huawei Mate 30 version 10.0.0.203 C00E201R7P2. The vulnerability stems from the program not adequately protecting against protected modules. A local attacker could exploit the...

5.5CVSS6AI score0.00199EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/01/29 12:00 a.m.59 views

Huawei Mate 30 Weak Algorithm Vulnerability (CVE-2021-22307)

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. A weak algorithm vulnerability exists in Huawei Mate 30 version 10.0.0.203 C00E201R7P2. The vulnerability stems from the program not adequately protecting against protected modules. A local attacker could exploit the...

5.5CVSS6.4AI score0.00199EPSS
SaveExploits0References1
Huawei
Huawei
added 2021/01/27 12:00 a.m.31 views

Security Advisory - Weak Algorithms Vulnerability in Huawei Smartphone

There is a weak algorithm vulnerability in Huawei smartphone. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module. Vulnerability ID: HWPSIRT-2020-37421 This vulnerability has been assigne...

5.5CVSS5.4AI score0.00199EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder