Lucene search
+L

11782 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-40529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two...

5.9CVSS5.9AI score0.01532EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-36811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgback...

4.7CVSS5.8AI score0.00106EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-40530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerou...

5.9CVSS6.4AI score0.01157EPSS
SaveExploits1References3
OSV
OSV
added 2025/03/04 9:15 a.m.7 views

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules...

4.3CVSS5.8AI score0.00244EPSS
SaveExploits1References2
NVD
NVD
added 2025/03/04 9:15 a.m.14 views

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules...

4.3CVSS0.00244EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/03/04 12:0 a.m.7 views

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules...

4.3CVSS4.5AI score0.00244EPSS
SaveExploits1References2
CVE
CVE
added 2025/03/04 12:0 a.m.79 views

CVE-2025-26849

CVE-2025-26849 affects Docusnap 13.0.1440.24261 and earlier/later versions due to a hard-coded cryptographic key. This key can be used to decrypt inventory files containing sensitive information (e.g., firewall rules). The description and connected sources confirm the root cause as a hard-coded k...

4.3CVSS4.5AI score0.00244EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2016-1938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The smpdiv function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services NSS before 3.21, as used in Mozilla Firefox before 44.0, improperly divides...

6.5CVSS7AI score0.03121EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/04 12:0 a.m.28 views

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules...

4.3CVSS0.00244EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2018-1000076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier,...

9.8CVSS6.8AI score0.02991EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2012-6702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Expat, when used in a parser that has not called XMLSetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographi...

5.9CVSS6.8AI score0.02371EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/03 7:55 p.m.9 views

GHSA-H8H6-7752-G28C Manifest Uses a One-Way Hash without a Salt

Summary Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt, identical passwords across multiple users will result in the same...

4.8CVSS5.3AI score0.00152EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/03 6:27 p.m.27 views

USN-7303-3 linux-gcp-6.8, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

9.8CVSS6.7AI score0.01369EPSS
SaveExploits0References209
Ubuntu
Ubuntu
added 2025/03/03 6:27 p.m.22 views

USN-7303-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

9.8CVSS7.4AI score0.01369EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2010-3173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 doe...

7.5CVSS7.3AI score0.03036EPSS
SaveExploits0References2
Veracode
Veracode
added 2025/03/02 2:33 p.m.10 views

Use Of A Broken Or Risky Cryptographic Algorithm

Easy-RSA is vulnerable to weak encryption algorithm usage. The vulnerability is due to insecure key generation due to the use of a weak default encryption algorithm when creating the private CA key with OpenSSL 3, and attackers can exploit this to more easily brute-force the CA private key and...

5.3CVSS5.1AI score0.00082EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/02 12:20 a.m.11 views

CVE-2024-44754

Cryptographic key extraction from internal flash in Minut M2 with firmware version 15142 allows physically proximate attackers to inject modified firmware into any other Minut M2 product via USB...

6.8CVSS6.9AI score0.00217EPSS
SaveExploits0
NVD
NVD
added 2025/02/28 4:15 p.m.16 views

CVE-2024-44754

Cryptographic key extraction from internal flash in Minut M2 with firmware version 15142 allows physically proximate attackers to inject modified firmware into any other Minut M2 product via USB...

6.8CVSS0.00217EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2025/02/28 12:11 p.m.32 views

USN-7311-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

9.8CVSS7.4AI score0.01369EPSS
SaveExploits1
OSV
OSV
added 2025/02/28 12:11 p.m.11 views

USN-7311-1 linux-aws, linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

9.8CVSS6.9AI score0.01369EPSS
SaveExploits1References212
Rows per page
Query Builder