Lucene search
+L

6 matches found

Circl
Circl
added 2025/05/13 4:31 p.m.20 views

CVE-2025-47276

creationtimestamp| type| source ---|---|--- 2025-05-13 16:31:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2vikxd6wr2 2025-05-13 16:48:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wsucnv42w 2025-05-13...

7.5CVSS4.8AI score0.00288EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/13 4:15 p.m.24 views

CVE-2025-47276

Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems OS. Prior to version 1.2.0, Actualizer uses OpenSSL's "-passwd" function, which uses SHA512 instead of a more suitable password hasher like Yescript/Argon2i. All Actualizer...

7.5CVSS0.00288EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/05/13 3:34 p.m.10 views

CVE-2025-47276 Actualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2i

Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems OS. Prior to version 1.2.0, Actualizer uses OpenSSL's "-passwd" function, which uses SHA512 instead of a more suitable password hasher like Yescript/Argon2i. All Actualizer...

7.5CVSS7AI score0.00288EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/05/13 3:34 p.m.32 views

CVE-2025-47276 Actualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2i

Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems OS. Prior to version 1.2.0, Actualizer uses OpenSSL's "-passwd" function, which uses SHA512 instead of a more suitable password hasher like Yescript/Argon2i. All Actualizer...

7.5CVSS0.00288EPSS
SaveExploits0References7
OSV
OSV
added 2025/05/13 3:34 p.m.12 views

CVE-2025-47276 Actualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2i

Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems OS. Prior to version 1.2.0, Actualizer uses OpenSSL's "-passwd" function, which uses SHA512 instead of a more suitable password hasher like Yescript/Argon2i. All Actualizer...

7.5CVSS7AI score
SaveExploits0References9
CVE
CVE
added 2025/05/13 3:34 p.m.57 views

CVE-2025-47276

Actualizer (a Debian OS creator) is affected by CVE-2025-47276 in versions before 1.2.0, due to using OpenSSL’s -passwd which hashes with SHA-512. The vulnerability pertains to password hashing quality for root and Alpha accounts across full OS deployments. Remediation is to upgrade to Actualizer...

7.5CVSS7.7AI score0.00288EPSS
SaveExploits0References7
Rows per page
Query Builder