11823 matches found
CVE-2023-22956
An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information...
Hardcoded credentials
An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information...
CVE-2023-22957
An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...
CVE-2023-22956
An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information...
CVE-2023-22957
An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...
CVE-2023-22957
The CVE-2023-22957 issue affects AudioCodes VoIP desk phones (libac_des3.so) through firmware up to 3.4.4.1000. The root cause is a hard-coded cryptographic key, enabling an attacker with access to backups or configuration files to decrypt encrypted values and retrieve sensitive information (e.g....
CVE-2023-22956
An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information...
Security Bulletin: IBM InfoSphere Global Name Management Vulnerable to CVE-2023-30441
Summary InfoSphere Global Name Management bundles IBM Java as internal component. A combination of two flaws in the JSSE component and IBMJCEPlus security provider expose some IBM Java releases to various cryptographic attacks when acting as a TLS server. This vulnerability is addressed...
CVE-2023-23342
If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented...
CVE-2023-23342
If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented...
Input validation
If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented...
CVE-2023-23342 HCL Nomad for web is affected by cryptographic validation of local data access that can be circumvented
If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented...
CVE-2023-23342
CVE-2023-23342 affects HCL Nomad for Web . Malicious manipulation of local files can bypass the validation of cryptographic keys when accessing local data. CNNVD notes the vulnerability exists in Nomad prior to 1.0.7 . Impact is described as compromising cryptographic validation (confidentiality/...
CVE-2023-23342 HCL Nomad for web is affected by cryptographic validation of local data access that can be circumvented
If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented...
Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet
Cryptographic flaws still matter. Heres a flaw in the random-number generator used to create private keys. The seed has only 32 bits of entropy. Seems like this flaw is being exploited in the wild. EDITED TO ADD 8/14: A good explainer...
PT-2023-18915 · Hcl +1 · Hcl Nomad For Web +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows the validation to use cryptographic keys to be circumvented if certain local files are manipulated in a specific manner. There is no...
CVE-2023-23347
HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information...
CVE-2023-23347
HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information...
Information disclosure
HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information...