Lucene search
+L

1596 matches found

OSV
OSV
added 2024/02/12 2:15 p.m.8 views

AZL-43006 CVE-2023-6681 affecting package python-jwcrypto 0.6.0-9

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service DoS attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service...

5.3CVSS6.8AI score0.00884EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/12 2:15 p.m.3 views

DEBIAN-CVE-2023-6681

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service DoS attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service...

5.3CVSS5.5AI score0.00884EPSS
SaveExploits0References1
PyPA
PyPA
added 2024/02/12 2:15 p.m.8 views

PYSEC-2024-104

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service DoS attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service...

5.3CVSS6.7AI score0.00884EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2024/02/12 2:15 p.m.31 views

CVE-2023-6681

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service DoS attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service...

5.3CVSS6.3AI score0.00884EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/12 2:15 p.m.4 views

PYSEC-2024-104

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service DoS attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service...

5.3CVSS5.8AI score0.00884EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/12 2:15 p.m.4 views

UBUNTU-CVE-2023-6681

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service DoS attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service...

5.3CVSS6.9AI score0.00884EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/02/12 2:4 p.m.26 views

CVE-2023-6681

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service DoS attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service...

5.3CVSS5.5AI score0.00884EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/02/12 2:4 p.m.40 views

CVE-2023-6681 Jwcrypto: denail of service via specifically crafted jwe

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service DoS attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service...

5.3CVSS5.6AI score0.00884EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/12 12:0 a.m.6 views

JWCrypto Security Vulnerability

JWCrypto is a JWCrypto open source implementation of the Javascript Object Signing and Encryption JOSE web standard. A security vulnerability exists in JWCrypto that stems from allowing an attacker to launch a Denial of Service DoS attack as well as possible password brute force and dictionary...

5.3CVSS7.5AI score0.00884EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/06 12:56 p.m.46 views

Security Bulletin: IBM Asset Data Dictionary Component uses json-path-2.6.0.jar which is vulnerable to CVE-2023-51074.

Summary IBM Asset Data Dictionary Component uses json-path-2.6.0.jar which is vulnerable to CVE-2023-51074. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2023-51074 DESCRIPTION: json-path is vulnerable to a denial of service, cause...

5.3CVSS5.8AI score0.00676EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/02/06 12:56 p.m.34 views

Security Bulletin:IBM Asset Data Dictionary Component uses logback-classic-1.3.0-alpha16.jar which is vulnerable to CVE-2023-6378

Summary IBM Asset Data Dictionary Component uses logback-classic-1.3.0-alpha16.jar which is vulnerable to CVE-2023-6378. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2023-6378 DESCRIPTION: QOS.ch Sarl Logback is vulnerable to a...

7.5CVSS7AI score0.009EPSS
SaveExploits0Affected Software1
Fedora
Fedora
added 2024/02/01 1:25 a.m.30 views

[SECURITY] Fedora 38 Update: python-templated-dictionary-1.4-1.fc38

Dictionary where getitem is run through Jinja2 template...

9.8CVSS7.3AI score0.01552EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/02/01 12:0 a.m.18 views

Fedora 38 : python-templated-dictionary (2024-4bd03c989b)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4bd03c989b advisory. Fixing CVE-2023-6395 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for th...

9.8CVSS7.6AI score0.01552EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/01/31 12:0 a.m.17 views

Fedora: Security Advisory (FEDORA-2024-f69989e7dd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.01552EPSS
SaveExploits1References3
NVD
NVD
added 2024/01/30 1:15 p.m.24 views

CVE-2024-0676

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack...

7.1CVSS6AI score0.00125EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/30 1:15 p.m.5 views

CVE-2024-0676

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack...

7.1CVSS7.1AI score0.00125EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/30 1:15 p.m.16 views

Design/Logic Flaw

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack...

3.2CVSS6.9AI score0.00125EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2024/01/30 12:40 p.m.35 views

CVE-2024-0676 Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack...

5.6CVSS7AI score0.00125EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/30 12:40 p.m.13 views

CVE-2024-0676 Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack...

5.6CVSS6.6AI score0.00125EPSS
SaveExploits0References1
Fedora
Fedora
added 2024/01/30 4:22 a.m.25 views

[SECURITY] Fedora 39 Update: python-templated-dictionary-1.4-1.fc39

Dictionary where getitem is run through Jinja2 template...

9.8CVSS7.3AI score0.01552EPSS
SaveExploits1
Rows per page
Query Builder