vantage6 Security Vulnerabilities

vantage6 is a vantage6 open source priVAcy preserviNg federalTed leArningG infrastructure for Secure Insight eXchange. A security vulnerability previously existed in vantage6 version 4.2.0 that stemmed from an authenticated user being able to inject code into an algorithmic environment variable...

PT-2024-18997 · Vantage6 · Vantage6

Name of the Vulnerable Software and Affected Versions: vantage6 versions prior to 4.2.0 Description: The vantage6 technology is used to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. Authenticated users could inject code into algorithm...

GHSA-WPXW-5XFM-X22V MeshCentral algorithm-downgrade issue

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

GHSA-7XM8-WJQ7-88R5 DeviceFarmer stf uses DES-ECB

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...

DeviceFarmer stf uses DES-ECB

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...

MeshCentral algorithm-downgrade issue

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

CVE-2023-51842

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

CVE-2023-51839

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...

CVE-2023-51842

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

CVE-2023-51839

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...

Design/Logic Flaw

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...

Moderate: Red Hat Security Advisory: libssh security update

An update for libssh is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

libssh: NULL pointer dereference during rekeying with algorithm guessing

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service...

PT-2024-14313 · Ylianst · Ylianst Meshcentral

Name of the Vulnerable Software and Affected Versions: Ylianst MeshCentral version 1.1.16 Description: An algorithm-downgrade issue was discovered. Recommendations: For Ylianst MeshCentral version 1.1.16, at the moment, there is no information about a newer version that contains a fix for this...

DeviceFarmer STF Security Vulnerability

STF is an open source web application from Device Farmer for remotely debugging smartphones, smartwatches and other gadgets from the comfort of your browser. A security vulnerability exists in DeviceFarmer STF version v3.6.6, which stems from the use of a corrupted or risky encryption algorithm...

MeshCentral Security Vulnerability

MeshCentral is a complete web-based remote monitoring and management site for the MeshCentral community. A security vulnerability exists in MeshCentral version 1.1.16 that stems from an algorithm degradation...

CVE-2023-51842

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

PT-2024-14311 · Devicefarmer · Devicefarmer Stf

Name of the Vulnerable Software and Affected Versions: DeviceFarmer stf version 3.6.6 Description: The issue is related to the use of a broken or risky cryptographic algorithm. Recommendations: For DeviceFarmer stf version 3.6.6, at the moment, there is no information about a newer version that...

CVE-2023-51842

CVE-2023-51842 involves MeshCentral by Ylianst, affecting version 1.1.16. Public records describe an algorithm-downgrade issue, with CVSS v3.1 base score 7.5 (HIGH; Network attack vector, no privileges, no user interaction). The available documents do not provide specifics on the root cause beyon...

CVE-2023-51839

DeviceFarmer STF v3.6.6 is affected by CVE-2023-51839 due to use of a broken or risky cryptographic algorithm, specifically DES-ECB. This weak cryptography vulnerability is repeatedly reported across multiple sources (GHSA/Veracode/CNNVD) and is rated high in CVSS metrics (Network, high confident...