Lucene search
+L

1082 matches found

NVD
NVD
•added 2021/12/15 6:15 p.m.•42 views

CVE-2021-42216

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.8CVSS0.01169EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/15 6:15 p.m.•21 views

CVE-2021-42216

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.8CVSS6.9AI score
SaveExploits0References2
Prion
Prion
•added 2021/12/15 6:15 p.m.•19 views

Design/Logic Flaw

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

7.5CVSS9.3AI score0.01169EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2021/12/15 5:53 p.m.•56 views

CVE-2021-42216

The CVE-2021-42216 entry concerns AnonAddy 0.8.5 with a broken or risky cryptographic algorithm in VerificationController.php. Affected software: AnonAddy (version 0.8.5). Vulnerable component: VerificationController.php; root cause: use of a broken or risky cryptographic algorithm. Impact (per C...

9.8CVSS9.4AI score0.01169EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/12/15 5:53 p.m.•35 views

CVE-2021-42216

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.6AI score0.01169EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•9 views

PT-2021-23559 · Anonaddy · Anonaddy

Name of the Vulnerable Software and Affected Versions: AnonAddy version 0.8.5 Description: A Broken or Risky Cryptographic Algorithm exists in the software via VerificationController.php. Recommendations: For AnonAddy version 0.8.5, consider updating to a newer version that addresses the issue wi...

9.8CVSS9.3AI score0.01169EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•1 views

CVE-2021-42216: Inadequate Encryption Strength

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.8CVSS5.7AI score0.01169EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/09 12:00 a.m.•4 views

CVE-2021-39002: Use of a Broken or Risky Cryptographic Algorithm

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS7.1AI score0.00919EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/23 12:00 a.m.•2 views

CVE-2021-22356: Use of a Broken or Risky Cryptographic Algorithm

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions...

5.9CVSS5.8AI score0.00417EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/11/08 2:15 p.m.•71 views

CVE-2021-39182 Use of Password Hash With Insufficient Computational Effort and Use of a Broken or Risky Cryptographic Algorithm and Reversible One-Way Hash in hashing.py

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of t...

7.5CVSS7.7AI score0.00562EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/08 12:00 a.m.•3 views

CVE-2021-39182: Use of a Broken or Risky Cryptographic Algorithm

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of t...

7.5CVSS5.9AI score0.00562EPSS
SaveExploits1References5
Huntr
Huntr
•added 2021/10/05 2:26 p.m.•20 views

Use of a Broken or Risky Cryptographic Algorithm in anonaddy/anonaddy

Description MD5 and SHA-1 are popular cryptographic hash algorithms often used to verify the integrity of messages and other data. Recent advances in cryptanalysis have discovered weaknesses in both algorithms. Consequently, MD5 and SHA-1 should no longer be relied upon to verify the authenticity...

0.2AI score
SaveExploits0References2
Huntr
Huntr
•added 2021/10/01 4:28 p.m.•9 views

Use of a Broken or Risky Cryptographic Algorithm in froxlor/froxlor

Description Froxlor uses microtime to seed uniqid which is then hashed to produce a session token, microtime can be reasonably brute-forced/predicted, thus allowing for a relatively large-scale account-takeover attack or accurate targeted ones. Both microtime and uniqid are cryptographically...

3.5AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•4 views

CVE-2021-36298: Use of a Broken or Risky Cryptographic Algorithm

Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete...

9.8CVSS6AI score0.00834EPSS
SaveExploits0References2
NVD
NVD
•added 2021/09/27 8:15 p.m.•28 views

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

7.5CVSS0.00668EPSS
SaveExploits0References2
Prion
Prion
•added 2021/09/27 8:15 p.m.•33 views

Security feature bypass

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

5CVSS7.5AI score0.00668EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/09/27 7:25 p.m.•40 views

CVE-2021-41096 Use of a Broken or Risky Cryptographic Algorithm in com.mayank.rucky

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

7.5CVSS7.7AI score0.00668EPSS
SaveExploits0References2
CVE
CVE
•added 2021/09/27 7:25 p.m.•67 views

CVE-2021-41096

The CVE-2021-41096 entry concerns the Rucky Android USB HID Rubber Ducky Launch Pad. Affected releases (versions 2.2 and earlier for release builds; 425 and earlier for nightly builds) use a weak cryptographic algorithm (RSA/ECB/PKCS1Padding) for encryption. The issue is addressed in v2.3 for rel...

7.5CVSS7.5AI score0.00668EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/27 12:00 a.m.•3 views

CVE-2021-41096: Use of a Broken or Risky Cryptographic Algorithm

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

7.5CVSS5.7AI score0.00668EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/15 12:00 a.m.•5 views

CVE-2021-29750: Use of a Broken or Risky Cryptographic Algorithm

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778...

7.5CVSS5.8AI score0.00687EPSS
SaveExploits0References2
Rows per page
Query Builder