Lucene search
+L

26822 matches found

CNNVD
CNNVD
added 2023/12/23 12:00 a.m.11 views

MOXA ioLogik E1200 Series 加密问题漏洞

MOXA ioLogik E1200 Series is a series of general-purpose controllers and I/O devices from MOXA, China. The MOXA ioLogik E1200 Series suffers from an encryption issue vulnerability that can be exploited by attackers to obtain sensitive information...

6.5CVSS6.6AI score0.00278EPSS
SaveExploits0References2
Veracode
Veracode
added 2023/12/22 5:25 a.m.25 views

Weak Cryptography

blinksocks is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the usage of weak encryption algorithms and fixed initialization vectors IV within /presets/ssr-auth-chain.js. This issue can be exploited by an attacker to disclose sensitive encrypted information via brute...

7.5CVSS6.2AI score0.00274EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2023/12/22 2:44 a.m.41 views

[SECURITY] Fedora 39 Update: opensc-0.24.0-1.fc39

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS11 API so...

6.6CVSS5.5AI score0.01174EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/12/22 12:00 a.m.17 views

The vulnerability in the implementation of the S/MIME encryption standard for the Thunderbird email client allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the S/MIME encryption standard implementation in the Thunderbird email client is related to errors in verifying the cryptographic signature due to discrepancies in the date and time of its creation. Exploiting this vulnerability could allow an attacker to compromise the...

7.6CVSS5.8AI score0.00633EPSS
SaveExploits0References12Affected Software6
Github Security Blog
Github Security Blog
added 2023/12/21 12:30 p.m.35 views

blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS6.7AI score0.00274EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/12/21 12:30 p.m.47 views

GHSA-PQJ5-37XF-X5GC blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS5.9AI score0.00274EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/12/21 11:15 a.m.9 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS7.1AI score0.00274EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/21 11:15 a.m.39 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS0.00274EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/21 11:15 a.m.23 views

Design/Logic Flaw

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

5CVSS6.7AI score0.00274EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/12/21 12:00 a.m.17 views

blinksocks security breach

blinksocks is a blinksocks open source framework for building composable proxy stacks. A security vulnerability exists in blinksocks version 3.3.8, which stems from a vulnerability that allows remote attackers to gain access to sensitive information via a weak encryption algorithm in...

7.5CVSS6.8AI score0.00274EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/12/21 12:00 a.m.23 views

IBM Spectrum Scale Encryption Problem Vulnerability (CNVD-2023-10112315)

IBM Spectrum Scale is a suite of scalable data and file management solutions from International Business Machines IBM based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping customers reduce storage costs while improvin...

7.5CVSS6.5AI score0.00411EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/21 12:00 a.m.24 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.3AI score
SaveExploits0References4
CNNVD
CNNVD
added 2023/12/21 12:00 a.m.17 views

Silicon Labs Gecko SDK Security Vulnerability

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK 4.4.0 and prior versions, which stems from a...

7.5CVSS6.7AI score0.00298EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/12/21 12:00 a.m.47 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5AI score0.00274EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/21 12:00 a.m.9 views

PT-2023-31578 · Unknown · Blinksocks

Name of the Vulnerable Software and Affected Versions: blinksocks version 3.3.8 Description: An issue was discovered in the component /presets/ssr-auth-chain.js, allowing remote attackers to obtain sensitive information via weak encryption algorithms. Recommendations: For blinksocks version 3.3.8...

7.5CVSS7.2AI score0.00274EPSS
SaveExploits0References9
CVE
CVE
added 2023/12/21 12:00 a.m.69 views

CVE-2023-50481

CVE-2023-50481 affects blinksocks 3.3.8. The vulnerability is in the component /presets/ssr-auth-chain.js, due to the use of weak encryption algorithms (and fixed IVs) that can disclose sensitive information. Impact is described as sensitive information disclosure; no exploit details are provided...

7.5CVSS7.2AI score0.00274EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/21 12:00 a.m.20 views

The vulnerability of the ssh-agent agent in the OpenSSH encryption protection mechanism allows attackers to disclose the protected information.

The vulnerability of the ssh-agent agent in the OpenSSH encryption protection mechanism is related to key management errors. Exploiting this vulnerability can allow attackers to disclose the protected information...

4.4CVSS6.9AI score0.00426EPSS
SaveExploits0References8Affected Software4
Github Security Blog
Github Security Blog
added 2023/12/20 8:31 p.m.28 views

Duplicate Advisory: Denial of service when decrypting attack controlled input in github.com/dvsekhvalnov/jose2go

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6294-6rgp-fr7r. This link is maintained to preserve external references. Original Description An attacker controlled input of a PBES2 encrypted JWE blob can have a very large p2c value that, when decrypted,...

5.4AI score
SaveExploits0References4Affected Software1
The Hacker News
The Hacker News
added 2023/12/20 1:32 p.m.53 views

Remote Encryption Attacks Surge: How One Vulnerable Device Can Spell Disaster

Ransomware groups are increasingly switching to remote encryption in their attacks, marking a new escalation in tactics adopted by financially motivated actors to ensure the success of their campaigns. "Companies can have thousands of computers connected to their network, and with remote...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2023/12/20 12:00 a.m.58 views

Dell NetWorker Encryption Issue Vulnerability

Dell NetWorker is an application from Dell USA Inc. Provides forum discussion features for Dell Inc. A cryptographic issue vulnerability exists in Dell NetWorker Virtual Edition 19.8 and prior versions, which stems from the use of an unrecommended encryption algorithm by the SSH component, and ca...

5.3CVSS6.6AI score0.00404EPSS
SaveExploits0References1
Rows per page
Query Builder