Lucene search
+L

1266 matches found

Vulnrichment
Vulnrichment
•added 2024/06/06 9:14 p.m.•22 views

CVE-2024-36823

The encrypt function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information...

7.2AI score0.0078EPSS
SaveExploits0References1
Mend
Mend
•added 2024/06/06 9:14 p.m.•9 views

CVE-2024-36823

The encrypt function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information...

8.7CVSS7.2AI score0.0078EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2024/06/06 12:00 a.m.•61 views

CVE-2024-36823

Last updated 24 July 2024...

7.5CVSS7.3AI score0.0078EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/06 12:00 a.m.•7 views

CVE-2024-36823: Inadequate Encryption Strength

The encrypt function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information...

7.5CVSS7.3AI score0.0078EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/06 12:00 a.m.•27 views

PT-2024-27171 · Unknown · Ninja Core

Name of the Vulnerable Software and Affected Versions: Ninja Core version 7.0.0 Description: The encrypt function was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information. Recommendations: For Ninja Core version 7.0.0, consider disabling the...

7.5CVSS7.2AI score0.0078EPSS
SaveExploits0References12
OpenVAS
OpenVAS
•added 2024/05/30 12:00 a.m.•32 views

Huawei EulerOS: Security Advisory for python-paramiko (EulerOS-SA-2024-1773)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7AI score0.93547EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2024/05/02 12:00 a.m.•25 views

PT-2024-27449 · Dynamiapps · The Frontend Admin

Name of the Vulnerable Software and Affected Versions: The Frontend Admin by DynamiApps plugin for WordPress versions up to, and including, 3.19.4 Description: The issue is related to improper missing encryption exception handling on the fea encrypt function. This allows unauthenticated attackers...

9.8CVSS6AI score0.00815EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/04/30 1:33 p.m.•21 views

golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey​ and ctx​. That functi...

7.5CVSS6.6AI score0.01533EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2024/04/30 9:57 a.m.•18 views

kernel: ext4: don't allow journal inode to have encrypt flag

In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesystem whose journal inode has the encrypt flag causes a NULL dereference in fscryptlimitioblocks when the 'inlinecrypt' mount option is used. The problem is tha...

5.5CVSS5.9AI score0.00102EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/04/26 8:17 p.m.•29 views

golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey​ and ctx​. That functi...

7.5CVSS6.6AI score0.01533EPSS
SaveExploits0References9
OpenVAS
OpenVAS
•added 2024/04/22 12:00 a.m.•81 views

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2024-1533)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7AI score0.93547EPSS
SaveExploits13References2
OpenVAS
OpenVAS
•added 2024/04/22 12:00 a.m.•58 views

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2024-1552)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7AI score0.93547EPSS
SaveExploits13References2
RedHat Linux
RedHat Linux
•added 2024/04/18 6:27 p.m.•22 views

golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey​ and ctx​. That functi...

7.5CVSS6.6AI score0.01533EPSS
SaveExploits0References9
CVE
CVE
•added 2024/04/10 9:59 p.m.•87 views

CVE-2024-31999

The CVE-2024-31999 issue affects @festify/secure-session used with Fastify. The vulnerability arises in the session removal process: after a session is marked for deletion, an attacker who can access the cookie could continue to reuse it, effectively retaining access across requests. Public detai...

7.4CVSS7.4AI score0.00617EPSS
SaveExploits0References2
Redos
Redos
•added 2024/04/09 12:00 a.m.•61 views

ROS-20240409-06

A vulnerability in SaltStack Salt's configuration management and remote operations execution system is related to receiving multiple bad packets to the server equal to the number of worker threads, Salt will stop responding back requests before restarting. Exploitation of the vulnerability could...

7.8CVSS7.8AI score0.03939EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2024/04/02 9:57 p.m.•32 views

golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey​ and ctx​. That functi...

7.5CVSS7.2AI score0.01533EPSS
SaveExploits0References9
Malwarebytes
Malwarebytes
•added 2024/03/29 1:37 p.m.•31 views

How to back up your iPhone to a Mac

They say the only backup you ever regret is the one you didnt make. iPhone backups can be used to easily move your apps and data to a new phone, to recover things youve lost, or to fix things that have failed. One of the most cost effective ways to backup your iPhone is to save backups to your Ma...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2024/03/13 12:00 a.m.•27 views

Huawei EulerOS: Security Advisory for proftpd (EulerOS-SA-2024-1345)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.93547EPSS
SaveExploits6References2
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•55 views

[SECURITY] Fedora 40 Update: pdftk-java-3.3.3-6.fc40

If PDF is electronic paper, then pdftk-java is an electronic staple-remover, hole-punch, binder, secret-decoder-ring, and X-Ray-glasses. PDFtk is a simple tool for doing everyday things with PDF documents: Merge PDF documents, split PDF pages into a new document, decrypt input as necessary passwo...

8.8CVSS8.9AI score0.02352EPSS
SaveExploits3
NVD
NVD
•added 2024/03/02 10:15 p.m.•28 views

CVE-2022-48628

In the Linux kernel, the following vulnerability has been resolved: ceph: drop messages from MDS when unmounting When unmounting all the dirty buffers will be flushed and after the last osd request is finished the last reference of the icount will be released. Then it will flush the dirty cap/sna...

5.5CVSS7.2AI score0.00237EPSS
SaveExploits0References3
Rows per page
Query Builder