Lucene search
+L

1600 matches found

CNVD
CNVD
added 2021/01/13 12:0 a.m.5 views

DLL Hijacking Vulnerability in Netease Youtao Dictionary PC Version (CNVD-2021-05433)

Youdao Dictionary is the world's first all-around free language translation software based on search engine technology, produced by NetEase Youdao, NetEase Youdao Dictionary PC terminal dll hijacking vulnerability. There is a DLL hijacking vulnerability in Netease Youdao Dictionary PC, which can ...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2021/01/13 12:0 a.m.4 views

DLL Hijacking Vulnerability in Netease Youtao Dictionary PC Version (CNVD-2021-05430)

Youdao Dictionary is the world's first all-around free language translation software based on search engine technology, produced by NetEase Youdao, NetEase Youdao Dictionary PC terminal dll hijacking vulnerability. There is a DLL hijacking vulnerability in Netease Youdao Dictionary PC, which can ...

7.4AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/01/07 10:23 a.m.5 views

How Does Your AD Password Policy Compare to NIST's Password Recommendations?

End-user passwords are one of the weakest components of your overall security protocols. Most users tend to reuse passwords across work and personal accounts. They may also choose relatively weak passwords that satisfy company password policies but can be easily guessed or brute-forced. Your user...

5.9AI score
SaveExploits0
OSV
OSV
added 2020/12/31 9:15 p.m.6 views

CVE-2020-35931

An issue was discovered in Foxit Reader before 10.1.1 and before 4.1.1 on macOS and PhantomPDF before 9.7.5 and 10.x before 10.1.1 and before 4.1.1 on macOS. An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subty...

7.8CVSS5.6AI score
SaveExploits0References1
CNVD
CNVD
added 2020/12/16 12:0 a.m.6 views

Netease Youtao Dictionary PC version suffers from dll hijacking vulnerability (CNVD-2020-73477)

Netease Yudao Dictionary is a multi-language translation software. A dll hijacking vulnerability exists in Netease Youdao Dictionary for PC. An attacker can exploit this vulnerability to execute malicious code...

7.2AI score
SaveExploits0
NVD
NVD
added 2020/12/11 1:15 a.m.25 views

CVE-2020-28214

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 all references, all versions, that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictab...

9.8CVSS6AI score0.00725EPSS
SaveExploits0References2
Prion
Prion
added 2020/12/11 1:15 a.m.19 views

Code injection

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 all references, all versions, that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictab...

2.1CVSS6AI score0.00725EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/12/11 12:51 a.m.39 views

CVE-2020-28214

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 all references, all versions, that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictab...

5.4AI score0.00725EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2020/12/11 12:51 a.m.8 views

CVE-2020-28214

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 all references, all versions, that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictab...

6AI score0.00725EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.12 views

deepref to security vulnerabilities

Isaymatato Deepref is a JS-written codebase for interacting with dictionary-type data by the individual developer Isaymatato. A security vulnerability exists in deepref versions 1.1.1 through 1.2.1, which stems from a prototype contamination vulnerability in allows an attacker to exploit the...

9.8CVSS7.6AI score0.02182EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/12/07 12:0 a.m.5 views

There is a dll hijacking vulnerability in Youdao Dictionary pc side

Youdao Dictionary is the world's first all-around free language translation software based on search engine technology produced by NetEase Youdao. A dll hijacking vulnerability exists in Youdao Dictionary pc, which can be exploited by attackers to gain control of the server...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/12/04 12:0 a.m.5 views

Netease Youdao Dictionary PC version suffers from dll hijacking vulnerability

Netease Yudao Dictionary is a multi-language translation software. A dll hijacking vulnerability exists in Netease Youtao Dictionary for PC. An attacker can exploit this vulnerability to execute malicious code...

7.1AI score
SaveExploits0
OSV
OSV
added 2020/11/19 8:15 p.m.11 views

UBUNTU-CVE-2020-28924

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

7.5CVSS7AI score0.01336EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2020/11/19 12:0 a.m.5 views

PT-2020-17057 · Rclone +2 · Rclone +2

Name of the Vulnerable Software and Affected Versions: Rclone versions prior to 1.53.3 Description: An issue was discovered due to the use of a weak random number generator, resulting in the password generator producing weak passwords with much less entropy than advertised. The suggested password...

7.5CVSS6.9AI score0.01336EPSS
SaveExploits1References36
OSV
OSV
added 2020/11/18 5:15 p.m.6 views

CVE-2020-26933

Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...

6CVSS5.8AI score0.00297EPSS
SaveExploits0References2
NVD
NVD
added 2020/11/18 5:15 p.m.19 views

CVE-2020-26933

Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...

7.2CVSS7AI score0.00297EPSS
SaveExploits0References2
Prion
Prion
added 2020/11/18 5:15 p.m.19 views

Design/Logic Flaw

Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...

3.6CVSS6AI score0.00297EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/11/18 4:50 p.m.42 views

CVE-2020-26933

CVE-2020-26933 concerns the Trusted Computing Group TPM Library Family 2.0 (library revisions 1.38–1.59). The issue is an Incorrect Access Control during a non-orderly TPM shut-down that uses USE_DA_USED, where improper initialization may render the TPM vulnerable to a dictionary attack. The core...

7.2CVSS6AI score0.00297EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/11/18 4:50 p.m.30 views

CVE-2020-26933

Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...

7.2CVSS7AI score0.00297EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2020/11/18 12:0 a.m.9 views

Trusted Computing Group Trusted Platform Module Security Vulnerability

Trusted Computing Group Trusted Platform Module TPM is a chip that is planted inside a computer to provide a trusted root for the computer, organized by the Trusted Computing Group. The chip was developed by the Trusted Computing Group TCG to effectively protect PCs from unauthorized access. A...

7.2CVSS6.3AI score0.00297EPSS
SaveExploits0References3
Rows per page
Query Builder