Lucene search
K

5318 matches found

NVD
NVD
added 2021/12/27 7:15 p.m.13 views

CVE-2021-43550

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX PIC iX Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0...

6.5CVSS0.00219EPSS
Exploits0References1
OSV
OSV
added 2021/12/27 7:15 p.m.4 views

CVE-2021-43550

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX PIC iX Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0...

6.5CVSS5.8AI score0.00219EPSS
Exploits0References1
Prion
Prion
added 2021/12/27 7:15 p.m.22 views

Design/Logic Flaw

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX PIC iX Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0...

3.3CVSS6.4AI score0.00219EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2021/12/27 6:48 p.m.17 views

CVE-2021-43550 Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX PIC iX Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0...

5.9CVSS6.6AI score0.00219EPSS
Exploits0References1
CVE
CVE
added 2021/12/27 6:48 p.m.61 views

CVE-2021-43550

The CVE-2021-43550 entry concerns the use of a broken or risky cryptographic algorithm in Philips PIC iX and Efficia CM Series. Connected sources (ICSMA-21-322-02) specify affected products: PIC iX versions C.02 and C.03 and Efficia CM Series revisions A.01 to C.0x and 4.0. The vulnerability enab...

6.5CVSS6AI score0.00219EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2021/12/25 2:15 a.m.22 views

Code injection

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures...

5CVSS7.6AI score0.00964EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2021/12/21 6:15 p.m.3 views

CVE-2021-27451

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

9.8CVSS5.8AI score0.00802EPSS
Exploits0References1
Prion
Prion
added 2021/12/21 6:15 p.m.24 views

Design/Logic Flaw

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

7.5CVSS9.4AI score0.00802EPSS
Exploits0References1Affected Software1
Code423n4
Code423n4
added 2021/12/21 12:0 a.m.9 views

Oracle doesn't calculate USDV/VADER price correctly

Handle TomFrenchBlockchain Vulnerability details Impact Invalid values returned from oracle for USDV and VADER prices in situations where the oracle uses more than one foreign asset. Proof of Concept The USDV price is calculated as so for simplicity we'll consider a two pairs: totalUSD =...

6.8AI score
Exploits0
ICS
ICS
added 2021/12/21 12:0 a.m.95 views

Fresenius Kabi Agilia Connect Infusion System (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Fresenius Kabi Equipment: Agilia Connect Infusion System Vulnerabilities: Uncontrolled Resource Consumption, Use of a Broken or Risky Cryptographic Algorithm, Insufficiently Protected Credentials,...

9.8CVSS8.7AI score0.0107EPSS
Exploits0References5
ThreatPost
ThreatPost
added 2021/12/16 1:45 p.m.43 views

‘DarkWatchman’ RAT Shows Evolution in Fileless Malware

A novel remote access trojan RAT being distributed via a Russian-language spear-phishing campaign is using unique manipulation of Windows Registry to evade most security detections, demonstrating a significant evolution in fileless malware techniques. Dubbed DarkWatchman, the RAT – discovered by...

7.5AI score
Exploits0References7
The Hacker News
The Hacker News
added 2021/12/16 10:19 a.m.44 views

New Fileless Malware Uses Windows Registry as Storage to Evade Detection

A new JavaScript-based remote access Trojan RAT propagated via a social engineering campaign has been observed employing sneaky "fileless" techniques as part of its detection-evasion methods to elude discovery and analysis. Dubbed DarkWatchman by researchers from Prevailion's Adversarial...

0.9AI score
Exploits0
NVD
NVD
added 2021/12/15 6:15 p.m.12 views

CVE-2021-42216

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.8CVSS0.01403EPSS
Exploits1References3
OSV
OSV
added 2021/12/15 6:15 p.m.13 views

CVE-2021-42216

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.8CVSS6.9AI score
Exploits0References3
Prion
Prion
added 2021/12/15 6:15 p.m.13 views

Design/Logic Flaw

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

7.5CVSS9.3AI score0.01403EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2021/12/15 5:53 p.m.40 views

CVE-2021-42216

The CVE-2021-42216 entry concerns AnonAddy 0.8.5 with a broken or risky cryptographic algorithm in VerificationController.php. Affected software: AnonAddy (version 0.8.5). Vulnerable component: VerificationController.php; root cause: use of a broken or risky cryptographic algorithm. Impact (per C...

9.8CVSS9.4AI score0.01403EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2021/12/15 5:53 p.m.14 views

CVE-2021-42216

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.6AI score0.01403EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/12/15 12:0 a.m.2 views

AnonAddy 加密问题漏洞

AnonAddy is an anonymous email forwarding system from AnonAddy, Inc. A security vulnerability exists in AnonAddy that stems from the presence of a corrupt or risky encryption algorithm in VerificationController.php in AnonAddy...

9.8CVSS8.3AI score0.01403EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2021/12/15 12:0 a.m.4 views

PT-2021-23559 · Anonaddy · Anonaddy

Name of the Vulnerable Software and Affected Versions: AnonAddy version 0.8.5 Description: A Broken or Risky Cryptographic Algorithm exists in the software via VerificationController.php. Recommendations: For AnonAddy version 0.8.5, consider updating to a newer version that addresses the issue wi...

9.8CVSS9.3AI score0.01403EPSS
Exploits1References6
CNVD
CNVD
added 2021/12/14 12:0 a.m.18 views

IBM Spectrum Copy Data Management Encryption Issue Vulnerability

IBM Spectrum Copy Data Management, an IBM company that modernizes, simplifies and automates data center copy management processes, is vulnerable to an encryption issue that stems from the fact that IBM Spectrum Copy Data Management uses a weaker-than-expected encryption algorithm, which could be...

7.5CVSS2.4AI score0.00665EPSS
Exploits0References1
Rows per page
Query Builder