Lucene search
+L

12020 matches found

OSV
OSV
added 2021/12/27 11:15 a.m.7 views

CVE-2021-24998

The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password. The password is generated using the strshuffle PHP function that "does not generate cryptographically secure values, and should not be used for cryptographic...

7.5CVSS7.1AI score0.01186EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/27 11:15 a.m.4 views

CVE-2021-24998

The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password. The password is generated using the strshuffle PHP function that "does not generate cryptographically secure values, and should not be used for cryptographic...

7.5CVSS7AI score0.01186EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/12/27 12:00 a.m.7 views

WordPress plugin Simple JWT Login 安全特征问题漏洞

WordPress and others are products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language.WordPress plugin is an application plugin.PHP and others are products of.PHP is a scripting language that executes on the server side. A security feature issue...

7.5CVSS7.3AI score0.01186EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/12/27 12:00 a.m.22 views

PT-2021-16397 · WordPress · Simple Jwt Login

Name of the Vulnerable Software and Affected Versions: Simple JWT Login WordPress plugin versions prior to 3.3.0 Description: The issue allows creation of new WordPress user accounts with a randomly generated password. The password generation uses the str shuffle PHP function, which does not...

7.5CVSS7.6AI score0.01186EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/12/25 2:15 a.m.13 views

CVE-2021-45487

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures...

7.5CVSS7.1AI score0.00964EPSS
SaveExploits0References3
OSV
OSV
added 2021/12/25 2:15 a.m.7 views

CVE-2021-45487

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures...

7.5CVSS5.8AI score0.00964EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/25 2:15 a.m.24 views

CVE-2021-45487

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures...

7.5CVSS0.00964EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/25 2:15 a.m.6 views

CVE-2021-45484

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...

7.5CVSS7.1AI score0.00964EPSS
SaveExploits0References3
OSV
OSV
added 2021/12/25 2:15 a.m.9 views

CVE-2021-45489

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

7.5CVSS5.8AI score0.00964EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/25 2:15 a.m.10 views

CVE-2021-45484

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...

7.5CVSS5.8AI score0.00964EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/25 2:15 a.m.29 views

CVE-2021-45489

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

7.5CVSS0.00964EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/25 2:15 a.m.26 views

Code injection

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...

5CVSS7.5AI score0.00964EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/12/25 1:04 a.m.37 views

CVE-2021-45487

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures...

7.8AI score0.00964EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/12/25 1:03 a.m.39 views

CVE-2021-45489

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

7.7AI score0.00964EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/12/25 12:00 a.m.13 views

PT-2021-24251 · Netbsd · Netbsd

Name of the Vulnerable Software and Affected Versions: NetBSD versions prior to 9.3 Description: The issue concerns the IPv4 ID generation algorithm, which does not utilize appropriate cryptographic measures. Recommendations: For NetBSD versions prior to 9.3, update to version 9.3 or later to...

7.5CVSS7.5AI score0.00964EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/12/25 12:00 a.m.10 views

NetBSD 安全特征问题漏洞

NetBSD is an open source Unix-like operating system from the NetBSD Foundation. NetBSD suffers from a security signature issue vulnerability that stems from the use of a weak cryptographic PRNG for the IPv6 slice ID generation algorithm in versions of NetBSD up to 9.2...

7.5CVSS7.2AI score0.00964EPSS
SaveExploits0References3
Redos
Redos
added 2021/12/24 12:00 a.m.17 views

ROS-2-1751

2.1751 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A vulnerability in the Nettle library involving the use of a failed cryptographic algorithm and allowing a remote attacker who has not been authenticated to execute arbitrary code.Identifier of the Information Securit...

8.1CVSS9.6AI score0.01687EPSS
SaveExploits0
OSV
OSV
added 2021/12/23 8:15 p.m.9 views

CVE-2017-2488

A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able to capture cleartext passwords...

7.5CVSS5.8AI score0.00593EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/23 8:15 p.m.32 views

CVE-2017-2488

A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able to capture cleartext passwords...

7.5CVSS0.00593EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/23 8:15 p.m.30 views

Authentication flaw

A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able to capture cleartext passwords...

5CVSS6.8AI score0.00593EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder