Lucene search
+L

329 matches found

Prion
Prion
added 2012/08/26 9:55 p.m.12 views

Design/Logic Flaw

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS6.3AI score0.01667EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2012/08/26 9:55 p.m.17 views

PYSEC-2012-13

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS4.3AI score0.01667EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2012/08/26 9:55 p.m.22 views

CVE-2012-2146

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS5.9AI score0.01667EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2012/08/26 9:0 p.m.30 views

CVE-2012-2146

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

5.7AI score0.01667EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2012/08/26 9:0 p.m.23 views

CVE-2012-2146

Removed by vendor...

4.3CVSS6.7AI score0.01667EPSS
SaveExploits0
CVE
CVE
added 2012/08/26 9:0 p.m.52 views

CVE-2012-2146

CVE-2012-2146 affects Elixir up to at least 0.8.0, where Blowfish in CFB mode is used without a unique initialization vector (IV). This weak IV construction can enable context-dependent users to obtain sensitive information and potentially decrypt the database. The connected documents confirm the...

4.3CVSS5.8AI score0.01667EPSS
SaveExploits0References6Affected Software1
FreeBSD
FreeBSD
added 2012/08/26 12:0 a.m.16 views

py39-Elixir -- weak use of cryptography

Red Hat Security Response Team reports: Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS5.7AI score0.01667EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2011/06/22 11:40 a.m.4 views

New XSS Vulnerability found on Sony PlayStation by c7-elixir - The C7 Crew

New XSS Vulnerability found onSony PlayStation by c7-elixir - The C7 Crew YES ! Sony is still Vulnerable to various bugs like XSS. Today a hackerc7-elixir from The C7 Crew has expose new XSS attack on Sony PlayStation's Website as shown. Sony got hacked 20 times in last two months by number of...

6.4AI score
SaveExploits0
The Hacker News
The Hacker News
added 2011/06/22 11:40 a.m.12 views

New XSS Vulnerability found on Sony PlayStation by c7-elixir - The C7 Crew

New XSS Vulnerability found on Sony PlayStation by c7-elixir - The C7 Crew YES ! Sony is still Vulnerable to various bugs like XSS. Today a hacker c7-elixir from The C7 Crew has expose new XSS attack on Sony PlayStation's Website as shown. Sony got hacked 20 times in last two months by number of...

6.3AI score
SaveExploits0
Rows per page
Query Builder