246 matches found
CVE-2020-6874
A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use this vulnerability for account credential enumeration attack or brute-force attack for password guessing. This affects: ZXIPTV, ZXIPTV-WEB-PV5.09.08.04...
Downgrade encryption scheme and break integrity through known-plaintext attack (NC-SA-2020-039)
A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files...
Python-RSA Cryptography Problem Vulnerability
Python-RSA is a Python library that supports encryption and decryption, signing, verification of signatures, and key generation from the Dutch software developer SYBREN A.STVEL. A cryptographic issue vulnerability exists in Python-RSA versions prior to 4.1, which can be exploited by an attacker t...
Yaws Encryption Problem Vulnerability
Yaws is a web server written in the Erlang language. A cryptographic issue vulnerability exists in yawsconfig.erl in Yaws versions 2.0.2 and 2.0.7. No detailed vulnerability details are provided at this time...
Oracle iPlanet Web Server is vulnerable to cryptographic issues (CNVD-2020-52060)
Oracle iPlanet Web Server OiWS is an American Oracle Oracle company's Web server mainly for medium-sized and large business applications. The Oracle iPlanet Web Server encryption issue vulnerability stems from a program that does not have proper access control for the admui/version URIs. An...
Encryption Issues Vulnerabilities in Joomla!
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A vulnerability exists in a cryptographic issue in Joomla! An attacker can exploit this vulnerability to obtain sensitive information...
Cryptographic Issues
Overview bcrypt is an A library to help you hash passwords. Affected versions of this package are vulnerable to Cryptographic Issues. When hashing a password containing an ASCII NUL character, that character acts as the string terminator. Any following characters are ignored. Remediation Upgrade...
CVE-2019-9155
A cryptographic issue in OpenPGP.js =4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve attack in order to gain the victim's ECDH private key...
CVE-2019-9155
A cryptographic issue in OpenPGP.js =4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve attack in order to gain the victim's ECDH private key...
CVE-2019-9155
CVE-2019-9155 affects OpenPGP.js up to version 4.2.0, where the ECDH implementation fails to validate the partner’s public key, enabling an attacker who can forge messages and observe decryption outcomes to perform an invalid-curve attack and potentially exfiltrate the victim’s ECDH private key. ...
CVE-2019-9155
A cryptographic issue in OpenPGP.js =4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve attack in order to gain the victim's ECDH private key...
IBM API Connect Information Disclosure Vulnerability (CNVD-2019-25511)
IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. A vulnerability exists in IBM API Connect versions 5.0.0.0 through 5.0.8.6 for cryptographic...
Information disclosure
A Cryptographic Issue CWE-310 vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure...
CVE-2018-7839
A Cryptographic Issue CWE-310 vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure...
CVE-2018-7839
A Cryptographic Issue CWE-310 vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure...
CVE-2018-7839
CVE-2018-7839 affects Schneider Electric IIoT Monitor 3.1.38 and is caused by a hard-coded cryptographic key in the AESEncryption component, leading to potential information disclosure. The risk context in the connected docs notes a cryptographic issue with confidentiality impact (C–H) and cites ...
IEEE P1735 Cryptographic Issue Vulnerability (CNVD-2017-33398)
IEEE P1735 is a standard dedicated to encrypting the intellectual property of electronic designs. The implementation of IEEE P1735 is vulnerable to a cryptographic issue. An attacker could exploit this vulnerability to modify the Rights Block to disable or relax access control...
CVE-2015-9003
In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel...