IBM Semeru Runtime Encryption Issue Vulnerability

IBM Semeru Runtime is a Java Runtime Environment JRE from International Business Machines IBM. IBM Semeru Runtime suffers from a cryptographic issue vulnerability that stems from the use of weaker-than-expected encryption algorithms that could allow an attacker to decrypt highly sensitive...

CVE-2023-50937

IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 275117...

CVE-2023-51839

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...

RHEL 8 : nodejs:16 (RHSA-2023:1582)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1582 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

PT-2024-13920 · Hcl · Hcl Dryice Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyXalytics affected versions not specified Description: The issue is related to the use of a broken cryptographic algorithm for encryption in HCL DRYiCE MyXalytics, which could allow an attacker to decrypt sensitive information...

The vulnerability in the implementation of the S/MIME encryption standard for the Thunderbird email client allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the S/MIME encryption standard implementation in the Thunderbird email client is related to errors in verifying the cryptographic signature due to discrepancies in the date and time of its creation. Exploiting this vulnerability could allow an attacker to compromise the...

Design/Logic Flaw

IBM CICS TX Advanced 10.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 260770...

CVE-2023-38361

CVE-2023-38361 affects IBM CICS TX Advanced 10.1, where weaker cryptographic algorithms could let an attacker decrypt highly sensitive data. The issue is documented across multiple sources (IBM bulletin A557C..., X-Force 260770). Remediation is available: upgrade to the fixed IBM CICS TX Advanced...

CVE-2023-39252

Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information...

CVE-2021-38933 IBM Sterling Connect:Express for UNIX information disclosure

IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210574...

CVE-2023-35763

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext...

CVE-2023-35763

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext...

Design/Logic Flaw

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext...

CVE-2023-35763 Iagona ScrutisWeb Use of Hard-coded Cryptographic Key

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext...

CVE-2023-35763

CVE-2023-35763 affects Iagona ScrutisWeb versions 2.1.37 and earlier. The vulnerability is described as a cryptographic flaw that could allow an unauthenticated attacker to decrypt passwords in plaintext, associated with use of a hard-coded cryptographic key (CWE-321). Affected product: ScrutisWe...

CVE-2023-35763 Iagona ScrutisWeb Use of Hard-coded Cryptographic Key

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext...

PT-2023-25296 · Iagona · Iagona Scrutisweb

Name of the Vulnerable Software and Affected Versions: Iagona ScrutisWeb versions 2.1.37 and prior Description: The issue is related to a cryptographic vulnerability. This vulnerability could allow an unauthenticated user to decrypt encrypted passwords into plaintext. Recommendations: For Iagona...

Amazon Linux 2023 : nodejs, nodejs-devel, nodejs-full-i18n (ALAS2023-2023-226)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-226 advisory. In some cases Node.js did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on...

CVE-2023-32449

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...

Dgraph 加密问题漏洞

Dgraph is Dgraph open source a horizontally scalable distributed GraphQL database with a graph backend. Dgraph version before 23.0.0 has a cryptographic problem vulnerability , the vulnerability stems from a nounce conflict , an attacker can use the vulnerability to brute-force attack on the log...