Lucene search
+L

693 matches found

Cvelist
Cvelist
•added 2020/03/10 2:47 p.m.•51 views

CVE-2019-10705

Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials...

7.6AI score0.01294EPSS
SaveExploits0References3
CVE
CVE
•added 2020/03/10 2:47 p.m.•65 views

CVE-2019-10705

CVE-2019-10705 affects Western Digital SanDisk X600 SATA SSDs. The vulnerability is in the drive’s access control mechanism, potentially allowing data to be decrypted without authentication. Public materials identify this as part of a set of SED flaws (with CVEs including 2018-12037/12038 and 201...

7.5CVSS5.5AI score0.01294EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2020/03/10 12:00 a.m.•4 views

PT-2020-9124

Name of the Vulnerable Software and Affected Versions Western Digital SanDisk X600 devices affected versions not specified Description A vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials. Recommendation...

7.5CVSS0.01294EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/10 12:00 a.m.•5 views

CVE-2019-10705: Insufficiently Protected Credentials

Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials...

7.5CVSS6.8AI score0.01294EPSS
SaveExploits0References2
Wired Threat Level
Wired Threat Level
•added 2020/02/27 3:00 p.m.•45 views

A Flaw in Billions of Wi-Fi Chips Let Attackers Decrypt Data

Affected devices include iPhones, iPads, Macs, Amazon Echos and Kindles, Android devices, and various Wi-Fi routers...

4.7AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2020/02/27 4:07 a.m.•208 views

Billions of Devices Open to Wi-Fi Eavesdropping Attacks

SAN FRANCISCO — A serious vulnerability in Wi-Fi chips has been discovered that affects billions of devices worldwide, according to researchers. It allows attackers to eavesdrop on Wi-Fi communications. The bug CVE-2019-15126 stems from the use of an all-zero encryption key in chips made by...

2.9CVSS6.9AI score0.07255EPSS
SaveExploits7References6
OSV
OSV
•added 2020/02/25 2:15 p.m.•12 views

CVE-2019-4557

IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 166206...

7.5CVSS6.5AI score0.00792EPSS
SaveExploits0References2
CVE
CVE
•added 2020/02/25 1:55 p.m.•62 views

CVE-2019-4557

IBM QRadar Advisor With Watson App for IBM QRadar SIEM (versions 1.1–2.5) is affected by CVE-2019-4557 due to the use of weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information stored in the app. The IBM security bulletin (A4C6...): rem...

7.5CVSS7.2AI score0.00792EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/02/04 5:15 p.m.•12 views

CVE-2019-4540

IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165813...

7.5CVSS5.8AI score0.00792EPSS
SaveExploits0References2
OSV
OSV
•added 2020/01/28 7:15 p.m.•15 views

CVE-2019-4639

IBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 170045...

7.5CVSS6.5AI score0.00792EPSS
SaveExploits0References2
OSV
OSV
•added 2019/12/18 5:16 p.m.•12 views

CVE-2019-4609

IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 168510...

7.5CVSS6.5AI score0.00792EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/12/18 12:00 a.m.•14 views

IBM API Connect Weak Encryption Vulnerability

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. A security vulnerability exists in IBM API Connect version 2018.4.1.7 that stems from the...

7.5CVSS6.7AI score0.00792EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/12 2:15 p.m.•28 views

Code injection

An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the database to be decrypted...

4.3CVSS5.7AI score0.0065EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2019/12/12 1:44 p.m.•34 views

CVE-2019-17428

An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the database to be decrypted...

5.7AI score0.0065EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/12 12:00 a.m.•6 views

CVE-2019-17428: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the database to be decrypted...

5.9CVSS6.2AI score0.0065EPSS
SaveExploits1References2
Palo Alto Networks
Palo Alto Networks
•added 2019/12/04 5:00 p.m.•170 views

OpenSSL vulnerability CVE-2019-1559 has been resolved in PAN-OS

The OpenSSL library has been updated in PAN-OS to resolve CVE-2019-1559. This is a cryptographic vulnerability that under certain situations may allow a remote attacker to decrypt data by observing server responses to different types of errors. This issue affects Palo Alto Networks PAN-OS 7.1...

3.9AI score0.17139EPSS
SaveExploits0References1Affected Software1
Palo Alto Networks
Palo Alto Networks
•added 2019/12/04 5:00 p.m.•26 views

OpenSSL vulnerability CVE-2019-1559 has been resolved in PAN-OS

The OpenSSL library has been updated in PAN-OS to resolve CVE-2019-1559. This is a cryptographic vulnerability that under certain situations may allow a remote attacker to decrypt data by observing server responses to different types of errors. This issue affects Palo Alto Networks PAN-OS 7.1...

5.9CVSS7.1AI score0.17139EPSS
SaveExploits0References1
HackRead
HackRead
•added 2019/11/25 5:52 p.m.•38 views

How to decrypt your data from Hakbit & Jigsaw ransomware for free

By Sudais Here's how you can decrypt data from Hakbit and Jigsaw ransomware for free. This is a post from HackRead.com Read the original post: How to decrypt your data from Hakbit & Jigsaw ransomware for free...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/11/21 12:00 a.m.•17 views

Fortinet FortiOS Trust Management Issue Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

6.5CVSS6.4AI score0.05828EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/11/19 12:00 a.m.•22 views

PT-2019-5737 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.2.3 and below FortiAnalyzer versions 6.2.3 and below Description: The issue is related to the use of a hard-coded cryptographic key in the CLI configuration of FortiManager and FortiAnalyzer, which may allow an attacke...

7.8CVSS7.2AI score0.02169EPSS
SaveExploits1References6
Rows per page
Query Builder