11823 matches found
Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2491)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.0 : python-cryptography (EulerOS-SA-2023-2531)
According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected...
EulerOS Virtualization 2.10.0 : python-cryptography (EulerOS-SA-2023-2491)
According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected...
Debian DSA-5459-1 : amd64-microcode - security update
The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5459 advisory. Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in Zen 2 CPUs may not be written to 0 correctly. This flaw...
The vulnerability of the Windows CryptoAPI programming interface of the Windows operating system allows a perpetrator to trigger a service failure.
The vulnerability of the Windows CryptoAPI programming interface of the Windows operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of Zoom’s video conferencing software lies in the improper verification of cryptographic signatures, which allows attackers to downgrade the versions of Zoom components to earlier versions.
The vulnerability of Zoom’s video conferencing software is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to downgrade the versions of Zoom components to earlier versions...
The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the use of cryptographic algorithms with hard-programmed keys for encryption. This allows attackers to compromise the integrity of the protected information.
The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the use of cryptographic algorithms for encryption with a hard-programmed key. Exploiting this vulnerability could allow an attacker, operating...
The vulnerability of the Windows Cryptographic component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Cryptographic component in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
TETRA:BURST — 5 New Vulnerabilities Exposed in Widely Used Radio Communication System
A set of five security vulnerabilities have been disclosed in the Terrestrial Trunked Radio TETRA standard for radio communication used widely by government entities and critical infrastructure sectors, including what's believed to be an intentional backdoor that could have potentially exposed...
PT-2023-12752 · Tetra · Tetra
Name of the Vulnerable Software and Affected Versions: TETRA affected versions not specified Description: The issue is related to a lack of cryptographic integrity check on TETRA air-interface encrypted traffic. This allows an active adversary to manipulate cleartext data in a bit-by-bit fashion...
The vulnerability of the FactoryTalk Policy Manager and FactoryTalk System Services software, related to the use of a hard-coded cryptographic key, allows attackers to escalate their privileges.
The vulnerability of the FactoryTalk Policy Manager and FactoryTalk System Services software lies in the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow attackers to enhance their privileges...
CVE-2023-37291 Galaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key
Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter and exploit this vulnerability to access system to operate processes and access data. This issue affects Vitals ESP: from 3.0.8 through...
openshift: OCP & FIPS mode
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated...
Out-of-bounds
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauthcrap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manage...
DEBIAN-CVE-2023-38408
The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists because o...
CVE-2021-38933
IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210574...
Design/Logic Flaw
IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210574...
CVE-2021-38933 IBM Sterling Connect:Express for UNIX information disclosure
IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210574...
CVE-2021-38933
CVE-2021-38933 affects IBM Sterling Connect:Express for UNIX 1.5.x. The IBM security bulletin notes use of weaker cryptographic algorithms could allow an attacker to decrypt highly sensitive information. Remediation: upgrade to Connect:Express for UNIX 1.5.0.1609 or newer. Current exploit details...
