4882 matches found
UBUNTU-CVE-2021-46041
A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64boxnew function, which causes a Denial of Service...
PT-2022-12522 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Segmentation Fault issue exists via the co64 box new function, causing a Denial of Service. Recommendations: For GPAC version 1.0.1, consider disabling the co64 box new function as a temporary workaround unti...
DEBIAN-CVE-2021-45831
A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via strlenavx2, which causes a Denial of Service...
CVE-2020-21237
An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks...
PT-2021-10605
Name of the Vulnerable Software and Affected Versions: LJCMS version 1.11 Description: An issue in the user login box of LJCMS allows attackers to hijack user accounts via brute force attacks. Recommendations: For LJCMS version 1.11, as a temporary workaround, consider restricting access to the...
PT-2021-10606
Name of the Vulnerable Software and Affected Versions: CSCMS version 4.0 Description: An issue in the user login box allows attackers to hijack user accounts via brute force attacks. Recommendations: For CSCMS version 4.0, consider implementing rate limiting or IP blocking to mitigate the risk of...
CSCMS security vulnerabilities
CScms is a content management system CMS developed based on the CI framework. cscms v4.0 is vulnerable due to a lack of effective protection against brute force attacks in the software user login box, which can be exploited by attackers to hijack user accounts via brute force attacks...
CVE-2020-21238: Improper Restriction of Excessive Authentication Attempts
An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...
CVE-2020-21237: Improper Restriction of Excessive Authentication Attempts
An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks...
WordPress Lets-Box Plugin Cross-Site Scripting Vulnerability
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language.Lets-Box Plugin is a WordPress open source application plugin.Wordpress Lets-Box Plugin has a cross-site scripting vulnerability in versions prior to 1.15.3, which stems from the Lets-Box Plugin'...
ModelSim Simulation and Questa Simulation Underprotected Credential Vulnerability
Questa and ModelSim simulators are used worldwide to simulate, debug, and verify integrated circuit designs, etc. ModelSim Simulation and Questa Simulation do not protect sufficient credentials, and the RSA white-box implementation in the affected application does not adequately protect the...
CVE-2021-42023
A vulnerability has been identified in ModelSim Simulation All versions, Questa Simulation All versions. The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property IP data in accordance...
CVE-2021-42023
A vulnerability has been identified in ModelSim Simulation All versions, Questa Simulation All versions. The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property IP data in accordance...
Design/Logic Flaw
A vulnerability has been identified in ModelSim Simulation All versions, Questa Simulation All versions. The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property IP data in accordance...
ModelSim Simulation Security Vulnerabilities
Questa and ModelSim simulators are used worldwide to simulate, debug, and verify integrated circuit designs, etc. ModelSim Simulation and Questa Simulation do not protect sufficient credentials, and the RSA white-box implementation in the affected application does not adequately protect the...
PT-2021-23474
Name of the Vulnerable Software and Affected Versions ModelSim Simulation all versions Questa Simulation all versions Description A vulnerability has been identified that affects the RSA white-box implementation in the affected applications. This vulnerability insufficiently protects the built-in...
CVE-2021-42023
The CVE-2021-42023 entry covers Siemens ModelSim Simulation and Questa Simulation (all versions) where the RSA white-box implementation does not sufficiently protect built‑in private keys used to decrypt IP data per IEEE 1735. The underlying issue is insufficiently protected credentials (CWE-522)...
CVE-2021-42023: Insufficiently Protected Credentials
A vulnerability has been identified in ModelSim Simulation All versions, Questa Simulation All versions. The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property IP data in accordance...