Lucene search
+L

75 matches found

OSV
OSV
added 2025/05/22 1:15 p.m.14 views

CVE-2025-3938

Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before...

9.8CVSS5.8AI score0.00349EPSS
SaveExploits0References2
CVE
CVE
added 2025/05/22 12:32 p.m.84 views

CVE-2025-3938

CVE-2025-3938 describes a Missing Cryptographic Step vulnerability in Tridium Niagara Framework and Niagara Enterprise Security across Windows, Linux and QNX. Affected versions are Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before ...

9.8CVSS6.6AI score0.00349EPSS
SaveExploits0References2Affected Software2
NVD
NVD
added 2024/02/02 4:15 p.m.36 views

CVE-2020-29504

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Missing Required Cryptographic Step Vulnerability...

9.8CVSS8AI score0.00489EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/02 4:15 p.m.29 views

Design/Logic Flaw

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Missing Required Cryptographic Step Vulnerability...

7.5CVSS7.4AI score0.00489EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2024/02/02 12:00 a.m.10 views

PT-2024-10809 · Dell · Dell Bsafe Micro Edition Suite +1

Name of the Vulnerable Software and Affected Versions: Dell BSAFE Crypto-C Micro Edition versions prior to 4.1.5 Dell BSAFE Micro Edition Suite versions prior to 4.5.2 Description: The issue is related to a Missing Required Cryptographic Step, which is a type of security flaw where a necessary...

9.8CVSS9.3AI score0.00489EPSS
SaveExploits0References3
Snyk
Snyk
added 2023/10/24 3:00 p.m.34 views

Missing Cryptographic Step

Overview openssl is a package that wraps the OpenSSL library. Affected versions of this package are vulnerable to Missing Cryptographic Step when the EVPEncryptInitex2, EVPDecryptInitex2 or EVPCipherInitex2 functions are used. An attacker can cause truncation or overreading of key and...

7.5CVSS6.9AI score0.03332EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/05 7:15 p.m.19 views

CVE-2023-34471

AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code HMAC. A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and authentication...

8.1CVSS7AI score0.00304EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/07/05 6:05 p.m.27 views

CVE-2023-34471 Missing Cryptographic Step

AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code HMAC. A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and authentication...

6.3CVSS8.4AI score0.00304EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/05 6:05 p.m.13 views

CVE-2023-34471 Missing Cryptographic Step

AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code HMAC. A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and authentication...

6.3CVSS7.2AI score0.00304EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/06 6:15 p.m.29 views

Information disclosure

A missing cryptographic steps vulnerability CWE-325 in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through 7.0.5 and below 7.0.0 may allow an attacker in possession of the encrypted file to decipher it...

1.7CVSS4AI score0.00266EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 3:56 a.m.40 views

Missing Cryptographic Step in OWASP Enterprise Security API for Java

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API ESAPI for Java 2.x before 2.1.0 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protectio...

2.6CVSS4AI score0.02426EPSS
SaveExploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 1:37 a.m.48 views

Missing Cryptographic Step in OWASP Enterprise Security API for Java

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API ESAPI for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic...

5.8CVSS4.8AI score0.01655EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2022/05/14 1:37 a.m.29 views

GHSA-2G56-7JV7-WXXQ Missing Cryptographic Step in OWASP Enterprise Security API for Java

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API ESAPI for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic...

5.8CVSS9.2AI score0.01655EPSS
SaveExploits1References9
OSV
OSV
added 2021/08/04 1:15 p.m.25 views

CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

4.9CVSS6.7AI score
SaveExploits0References2
NVD
NVD
added 2021/08/04 1:15 p.m.32 views

CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

5.3CVSS0.0046EPSS
SaveExploits1References2
Prion
Prion
added 2021/08/04 1:15 p.m.29 views

Design/Logic Flaw

showdoc is vulnerable to Missing Cryptographic Step...

4CVSS5AI score0.0046EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/08/04 12:50 p.m.114 views

CVE-2021-3680

CVE-2021-3680 relates to showdoc and centers on a missing cryptographic step due to a hardcoded salt in the user password hash function. Documents from GHSA-8VH3-29MR-M9XG and PT-2021-21367 confirm this flaw and describe the use of a fixed salt, implying weaknesses in password hashing. No concret...

5.3CVSS5AI score0.0046EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/09 7:15 p.m.6 views

CVE-2021-26100

A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the encrypted messages to manipulate them in such a way that makes the tampering and the recovery of the plaintexts possible...

7.5CVSS6.7AI score0.00342EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2021/07/09 6:23 p.m.12 views

CVE-2021-26100

A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the encrypted messages to manipulate them in such a way that makes the tampering and the recovery of the plaintexts possible...

5.9CVSS6.9AI score0.00342EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/09 6:23 p.m.23 views

CVE-2021-26100

A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the encrypted messages to manipulate them in such a way that makes the tampering and the recovery of the plaintexts possible...

5.9CVSS7.7AI score0.00342EPSS
SaveExploits0References1
Rows per page
Query Builder