Lucene search
+L

83 matches found

Vulnrichment
Vulnrichment
•added 2024/01/29 12:00 a.m.•8 views

CVE-2023-51842

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

6.8AI score0.00835EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/29 12:00 a.m.•20 views

PT-2024-14313 · Ylianst · Ylianst Meshcentral

Name of the Vulnerable Software and Affected Versions: Ylianst MeshCentral version 1.1.16 Description: An algorithm-downgrade issue was discovered. Recommendations: For Ylianst MeshCentral version 1.1.16, at the moment, there is no information about a newer version that contains a fix for this...

7.5CVSS7.3AI score0.00835EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2024/01/29 12:00 a.m.•38 views

CVE-2023-51842

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

7.5CVSS7.1AI score
SaveExploits0References5
osv_usn
osv_usn
•added 2024/01/15 6:31 p.m.•44 views

USN-6585-1 libssh2 vulnerability

Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH protocol was vulnerable to a prefix truncation attack. If a remote attacker was able to intercept SSH communications, extension negotiation messages could be truncated, possibly leading to certain algorithms and features being...

5.9CVSS7AI score0.93547EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2023/12/20 12:00 a.m.•76 views

Ubuntu: Security Advisory (USN-6560-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.93547EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2023/06/19 12:00 a.m.•98 views

Synology Router Manager (SRM) 1.2.x Multiple Vulnerabilities (Synology-SA-20:14)

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS6.8AI score0.04681EPSS
SaveExploits7References1
attackerkb
attackerkb
•added 2022/07/12 2:15 p.m.•8 views

CVE-2022-33173

An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead...

7.5CVSS5.8AI score0.01221EPSS
SaveExploits0References4
NVD
NVD
•added 2022/07/12 2:15 p.m.•31 views

CVE-2022-33173

An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead...

7.5CVSS0.01221EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/07/11 12:20 p.m.•42 views

CVE-2022-33173

An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead...

7.7AI score0.01221EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•7 views

PT-2022-21722

Name of the Vulnerable Software and Affected Versions Couchbase Server versions prior to 7.0.4 Description An algorithm-downgrade issue was discovered in Couchbase Server. Analytics Remote Links may temporarily downgrade to a non-TLS connection to determine the TLS port number, using SCRAM-SHA...

7.5CVSS0.01221EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•9 views

CVE-2022-33173: Undefined Security Weakness

An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead...

7.5CVSS7.3AI score0.01221EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/10/29 9:15 a.m.•22 views

CVE-2020-27652

Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager DSM before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors...

8.3CVSS7.3AI score0.00832EPSS
SaveExploits1References2
Prion
Prion
•added 2020/10/29 9:15 a.m.•36 views

Design/Logic Flaw

Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager SRM before 1.2.4-8081 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors...

5.1CVSS7.7AI score0.00832EPSS
SaveExploits1References2Affected Software2
Prion
Prion
•added 2020/10/29 9:15 a.m.•41 views

Design/Logic Flaw

Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager DSM before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors...

5.1CVSS7.7AI score0.00832EPSS
SaveExploits1References2Affected Software2
CVE
CVE
•added 2020/10/29 9:00 a.m.•100 views

CVE-2020-27652

Summary: CVE-2020-27652 affects Synology DiskStation Manager (DSM) via QuickConnect: an algorithm downgrade vulnerability enables MITM attackers to spoof servers and obtain sensitive information through unspecified vectors. The issue is documented across multiple sources (NVD, Synology SA-20:18, ...

8.3CVSS8.3AI score0.00832EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/10/29 9:00 a.m.•47 views

CVE-2020-27652

Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager DSM before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors...

8.3CVSS8.5AI score0.00832EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/29 12:00 a.m.•11 views

CVE-2020-27652: Use of a Broken or Risky Cryptographic Algorithm

Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager DSM before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors...

8.3CVSS5.8AI score0.00832EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/29 12:00 a.m.•8 views

CVE-2020-27653: Use of a Broken or Risky Cryptographic Algorithm

Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager SRM before 1.2.4-8081 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors...

8.3CVSS5.8AI score0.00832EPSS
SaveExploits1References3
ICS
ICS
•added 2020/09/17 12:00 a.m.•68 views

ICSMA-20-261-01_Philips Clinical Collaboration Platform

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: Philips Equipment: Clinical Collaboration Platform Vulnerabilities: Cross-site Request Forgery, Improper Neutralization of Script in Attributes in a Web Page, Protection Mechanism Failure, Algorithm Downgrade,...

7.1CVSS6.4AI score0.00621EPSS
SaveExploits0References2
Cisco
Cisco
•added 2018/08/15 4:00 p.m.•53 views

Cisco Small Business 100 Series and 300 Series Wireless Access Points Encryption Algorithm Downgrade Vulnerability

A vulnerability in the implementation of Extensible Authentication Protocol over LAN EAPOL functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an unauthenticated, adjacent attacker to force the downgrade of...

4.3CVSS0.3AI score0.00253EPSS
SaveExploits0References1
Rows per page
Query Builder