Lucene search
+L

643 matches found

Rapid7 Blog
Rapid7 Blog
•added 2021/09/07 1:00 p.m.•79 views

CVE-2021-3546[78]: Akkadian Console Server Vulnerabilities (FIXED)

!CVE-2021-3546\78: Akkadian Console Server Vulnerabilities \FIXED\https://blog.rapid7.com/content/images/2021/09/akkadian-vuln.jpg Over the course of routine security research, Rapid7 researchers Jonathan Peterson, Cale Black, William Vu, and Adam Cammack discovered that the Akkadian Console ofte...

4.6CVSS1.3AI score0.00463EPSS
SaveExploits0
OSV
OSV
•added 2021/08/30 5:15 p.m.•15 views

CVE-2021-29722

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095...

7.5CVSS5.5AI score0.00919EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/08/27 12:00 a.m.•8 views

CVE-2021-29722

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095...

7.5CVSS6.6AI score0.00919EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/23 12:00 a.m.•4 views

CVE-2021-29704: Use of a Broken or Risky Cryptographic Algorithm

IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS5.8AI score0.00687EPSS
SaveExploits0References2
NVD
NVD
•added 2021/07/30 2:15 p.m.•42 views

CVE-2021-37588

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data...

5.9CVSS0.00908EPSS
SaveExploits0References4
Prion
Prion
•added 2021/07/30 2:15 p.m.•29 views

Design/Logic Flaw

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data...

4.3CVSS5.7AI score0.00908EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2021/07/27 10:06 p.m.•45 views

CVE-2021-37588

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data...

5.9AI score0.00908EPSS
SaveExploits0References4
OSV
OSV
•added 2021/07/26 12:15 p.m.•16 views

CVE-2021-20337

IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 194448...

7.5CVSS5.8AI score0.0071EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/23 12:00 a.m.•9 views

CVE-2021-20337

IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 194448...

7.5CVSS6.5AI score0.0071EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/07/13 4:15 p.m.•16 views

CVE-2021-20360

IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195031...

7.5CVSS5.8AI score0.0071EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/13 12:00 a.m.•8 views

CVE-2021-20497

IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 197969...

7.5CVSS6.6AI score0.0071EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/07/12 12:00 a.m.•8 views

CVE-2021-20369

IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361...

5.9CVSS6.2AI score0.00674EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2021/07/12 12:00 a.m.•13 views

IBM Cloud Pak for Applications 加密问题漏洞

IBM Cloud Pak for Applications is an application from IBM USA, Inc. A security vulnerability exists in IBM Cloud Pak for Applications version 4.3, which stems from the application's use of an improper encryption algorithm. An attacker could exploit the vulnerability to be able to decrypt highly...

5.9CVSS5.6AI score0.00674EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/07/09 12:00 a.m.•14 views

IBM Tivoli Netcool Impact 加密问题漏洞

IBM Tivoli Netcool/Impact is a suite of network management software from IBM, USA. The software has the ability to automate business-critical functions and provide a platform that provides unified access to real-time data, events and indicators. A security vulnerability exists in IBM Tivoli...

7.5CVSS5.6AI score0.0071EPSS
SaveExploits0References3
OSV
OSV
•added 2021/07/07 5:15 p.m.•12 views

CVE-2021-20379

IBM Guardium Data Encryption GDE 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195711...

7.5CVSS6.6AI score0.00454EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/07 12:00 a.m.•3 views

CVE-2021-20379: Use of a Broken or Risky Cryptographic Algorithm

IBM Guardium Data Encryption GDE 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195711...

7.5CVSS5.8AI score0.00454EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/06 11:15 a.m.•11 views

CVE-2021-24005

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key...

7.5CVSS6.7AI score0.00563EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/07/06 12:00 a.m.•13 views

IBM Security Guardium Data Encryption加密问题漏洞

IBM Security Guardium Data Encryption is a software for securing sensitive data within organizations from IBM, U.S.A. A security vulnerability exists in IBM Security Guardium Data Encryption, which stems from the use of weaker than expected encryption algorithms for data encryption, which could b...

8.8CVSS5.6AI score0.00722EPSS
SaveExploits0References3
OSV
OSV
•added 2021/05/24 2:15 p.m.•13 views

CVE-2021-20419

IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280...

7.5CVSS7.3AI score0.0071EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/21 12:00 a.m.•13 views

IBM Security Guardium 加密问题漏洞

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A weak cryptographic algorithm vulnerability exists in IBM Security...

7.5CVSS7.1AI score0.0071EPSS
SaveExploits0References6
Rows per page
Query Builder