5984 matches found
CVE-2023-46133
CVE-2023-46133 documents a weakness in CryptoES prior to v2.1.0 where PBKDF2 was configured by default to use SHA-1 with a single iteration (1,000), making it far weaker than the 1993 specification and current standards. This can impact password protection and digital signatures. A patch is avail...
CVE-2023-46133 crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
CryptoES is a cryptography algorithms library compatible with ES6 and TypeScript. Prior to version 2.1.0, CryptoES PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA1, a...
jose4j uses weak cryptographic algorithm
jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less...
GHSA-7G24-QG88-P43Q jose4j uses weak cryptographic algorithm
jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less...
CVE-2023-31582
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...
DEBIAN-CVE-2023-31582
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...
Design/Logic Flaw
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...
WordPress WP Word Count Plugin <= 3.2.4 is vulnerable to Broken Access Control
Software WP Word Count Type Plugin Vulnerable versions = 3.2.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46628 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID becf99c528fe Credits Abdi Pranata Required privilege...
jose4j Security Feature Issue Vulnerability
jose4j is a powerful and easy-to-use open source implementation of the JSON Web Token JWT and the JOSE specification suite JWS, JWE, and JWK open sourced from Bitbucket . A security vulnerability exists in versions of jose4j prior to v0.9.3 that stems from allowing an attacker to set a low...
CVE-2023-31582
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...
CVE-2023-31582
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...
CVE-2023-31582
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...
CVE-2023-31582
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less...
CVE-2023-31582
CVE-2023-31582 is covered by a connected document that provides concrete technical details. TheJose4J library (affected component) versions before 0.9.3 are vulnerable to setting a very low iteration count (1000 or less) in cryptographic operations. The linked IBM/ADX bulletin notes the vulnerabi...
OESA-2023-1759 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnlosfaddcallback function did not validate the user mode controlled optnum field. This flaw allows a local privileged CAPNETADMIN attacker to trigger an...
CVE-2022-26943
The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two attacks. First, due to the limited...
PT-2023-12895 · Motorola · Motorola Mtm5000
Name of the Vulnerable Software and Affected Versions: Motorola MTM5000 series firmwares affected versions not specified Description: The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG that relies on a tick count register as its sole entropy source. This...
mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...
Integer Overflow to Buffer Overflow
Overview Affected versions of this package are vulnerable to Integer Overflow to Buffer Overflow vi DFAContentModel::countLeafNodes and DFAContentModel::buildDFA. An attacker can cause out-of-bound access by sending a specially crafted HTTP request. Remediation Upgrade xerces-c to version 3.2.4 o...