134 matches found
CVE-2023-31135 Dgraph Audit Log Encryption nonce reuse
Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being...
PT-2023-23169 · Dgraph · Dgraph
Name of the Vulnerable Software and Affected Versions: Dgraph versions prior to v23.0.0 Description: Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is...
Dgraph 加密问题漏洞
Dgraph is Dgraph open source a horizontally scalable distributed GraphQL database with a graph backend. Dgraph version before 23.0.0 has a cryptographic problem vulnerability , the vulnerability stems from a nounce conflict , an attacker can use the vulnerability to brute-force attack on the log...
GHSA-P4G4-WGRH-QRG2 vulnerabilities
Vulnerabilities for packages: dgraph...
GHSA-WF43-55JJ-VWQ8 vulnerabilities
Vulnerabilities for packages: etcd, etcd-fips, dgraph...
CVE-2020-15114 vulnerabilities
Vulnerabilities for packages: etcd, etcd-fips, dgraph...
CVE-2020-15136 vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2020-15114 vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2020-15136 vulnerabilities
Vulnerabilities for packages: etcd, etcd-fips, dgraph...
CVE-2020-15106 vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2020-15106 vulnerabilities
Vulnerabilities for packages: etcd, etcd-fips, dgraph...
Beagle - An Incident Response And Digital Forensics Tool Which Transforms Security Logs And Data Into Graphs
Beagle is an incident response and digital forensics tool which transforms data sources and logs into graphs. Supported data sources include FireEye HX Triages, Windows EVTX files, SysMon logs and Raw Windows memory images. The resulting Graphs can be sent to graph databases such as Neo4J or...