Lucene search
K

5318 matches found

OSV
OSV
added 2022/04/12 6:15 p.m.2 views

CVE-2022-22559

Dell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm. An unprivileged network attacker could exploit this vulnerability, leading to the potential for information disclosure...

7.5CVSS5.8AI score0.00553EPSS
Exploits0References1
NVD
NVD
added 2022/04/12 6:15 p.m.21 views

CVE-2022-22559

Dell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm. An unprivileged network attacker could exploit this vulnerability, leading to the potential for information disclosure...

7.5CVSS0.00553EPSS
Exploits0References1
CVE
CVE
added 2022/04/12 5:50 p.m.91 views

CVE-2022-22559

Dell PowerScale OneFS 9.3.0 contains a vulnerability due to the use of a broken or risky cryptographic algorithm that could allow an unprivileged network attacker to cause information disclosure. The connected documents confirm the affected product and version and describe the impact as informati...

7.5CVSS7.2AI score0.00553EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/04/11 11:15 a.m.20 views

Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any...

6.4CVSS9.1AI score0.00538EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/04/11 10:15 a.m.39 views

CVE-2022-1252 Use of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard5

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any...

8.2CVSS9.4AI score0.00538EPSS
Exploits1References2
ThreatPost
ThreatPost
added 2022/04/08 4:6 p.m.190 views

Google Play Bitten by Sharkbot Info-stealer ‘AV Solution’

Researchers have found the info-stealing Android malware Sharkbot lurking unsuspected in the depths of the Google Play store under the cover of anti-virus AV solutions. While analyzing suspicious applications on the store, the Check Point Research CPR team found what purported to be genuine AV...

8.8AI score
Exploits0References6
CNVD
CNVD
added 2022/04/08 12:0 a.m.10 views

Fortinet FortiWAN Encryption Issue Vulnerability

Fortinet FortiWan is a network appliance from Fortinet, Inc. Fortinet FortiWAN versions prior to 4.5.9 are vulnerable to an encryption issue that stems from the program using a corrupted or risky encryption algorithm. An attacker could exploit this vulnerability to decrypt and forge protocol...

6.5CVSS4.1AI score0.00549EPSS
Exploits0References1
NVD
NVD
added 2022/04/06 10:15 a.m.10 views

CVE-2021-32593

A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...

6.5CVSS0.00549EPSS
Exploits0References1
Prion
Prion
added 2022/04/06 10:15 a.m.14 views

Design/Logic Flaw

A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...

6.4CVSS6.5AI score0.00549EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/06 9:15 a.m.15 views

CVE-2021-32593

A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...

6.5CVSS6.7AI score0.00549EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/04/06 9:15 a.m.10 views

CVE-2021-32593

A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...

6.5CVSS7.1AI score0.00549EPSS
Exploits0References1
CVE
CVE
added 2022/04/06 9:15 a.m.86 views

CVE-2021-32593

CVE-2021-32593 affects Fortinet FortiWAN before 4.5.9, where a broken or risky cryptographic algorithm (CWE-327) in the Dynamic Tunnel Protocol may allow an unauthenticated remote attacker to decrypt and forge protocol messages. The issue is confirmed across multiple trusted sources (Fortinet PSI...

6.5CVSS6.5AI score0.00549EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2022/04/01 11:15 p.m.18 views

CVE-2021-33018

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information...

7.5CVSS0.00541EPSS
Exploits0References2
OSV
OSV
added 2022/04/01 11:15 p.m.2 views

CVE-2021-33018

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information...

7.5CVSS7.4AI score0.00541EPSS
Exploits0References2
Prion
Prion
added 2022/04/01 11:15 p.m.18 views

Design/Logic Flaw

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information...

5CVSS8AI score0.00541EPSS
Exploits0References2Affected Software4
Cvelist
Cvelist
added 2022/04/01 10:17 p.m.26 views

CVE-2021-33018 Philips Vue PACS Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information...

7.5CVSS7.7AI score0.00541EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/04/01 10:17 p.m.6 views

CVE-2021-33018 Philips Vue PACS Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information...

7.5CVSS7.5AI score0.00541EPSS
Exploits0References2
CVE
CVE
added 2022/04/01 10:17 p.m.107 views

CVE-2021-33018

Vulnerability CVE-2021-33018 affects Philips Vue PACS family (Vue PACS, Vue MyVue, Vue Speech, Vue Motion) up to version 12.2.x.x and earlier, due to use of a broken or risky cryptographic algorithm (CWE-327). The issue could permit exposure of sensitive information. Philips and CISA have issued ...

7.5CVSS7.7AI score0.00541EPSS
Exploits0References2Affected Software4
CNNVD
CNNVD
added 2022/04/01 12:0 a.m.3 views

IBM UrbanCode Deploy 加密问题漏洞

IBM UrbanCode Deploy UCD is a suite of application automation deployment tools from IBM. The tool is based on an application deployment automation management information model, and through remote agent technology to automate the deployment of complex applications in different environments, etc. I...

7.5CVSS5.6AI score0.00692EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/03/30 12:0 a.m.92 views

Firebase PHP-JWT key/algorithm type confusion

In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue e.g., RS256 / HS256 exists via the kid aka Key ID header, when multiple types of keys are loaded in a key ring. This allows an attacker to forge tokens that validate under the incorrect key. NOTE: this provides a straightforward way t...

9.1CVSS2.4AI score0.00777EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder