Lucene search
K

12 matches found

Github Security Blog
Github Security Blog
added 2023/12/06 6:30 a.m.27 views

pubnub Insufficient Entropy vulnerability

Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions of the package pubnub before 7.3.0;...

5.9CVSS7AI score0.00381EPSS
Exploits1References21Affected Software9
CNNVD
CNNVD
added 2023/12/06 12:0 a.m.1 views

PubNub Security Breach

PubNub is a library of PubNub open source . It is used to take care of the infrastructure and APIs required to handle the real-time communication layer of an application. PubNub suffers from a security vulnerability that stems from an inefficient implementation of the AES-256-CBC encryption...

5.9CVSS5.7AI score0.00381EPSS
Exploits1References18
GitLab Advisory Database
GitLab Advisory Database
added 2023/12/06 12:0 a.m.5 views

pubnub Insufficient Entropy vulnerability

Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions of the package pubnub before 7.3.0;...

5.9CVSS6.3AI score0.00381EPSS
Exploits1References22Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/05 12:0 a.m.2 views

PT-2023-20533 · Pubnub · Pubnub/Swift +7

Name of the Vulnerable Software and Affected Versions: pubnub versions prior to 7.4.0 com.pubnub:pubnub all versions github.com/pubnub/go all versions github.com/pubnub/go/v7 versions prior to 7.2.0 pubnub/pubnub versions prior to 6.1.0 pubnub/c-core versions prior to 4.5.0 com.pubnub:pubnub-kotl...

5.9CVSS5.4AI score0.00381EPSS
Exploits1References28
Snyk
Snyk
added 2023/08/13 9:0 p.m.3 views

Insufficient Entropy

Overview Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bit...

5.9CVSS6.9AI score0.00381EPSS
Exploits1References2
Snyk
Snyk
added 2023/08/13 9:0 p.m.3 views

Insufficient Entropy

Overview Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bit...

5.9CVSS6.9AI score0.00381EPSS
Exploits1References2
Snyk
Snyk
added 2023/08/13 9:0 p.m.3 views

Insufficient Entropy

Overview Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bit...

5.9CVSS6.9AI score0.00381EPSS
Exploits1References2
Snyk
Snyk
added 2023/08/13 9:0 p.m.1 views

Insufficient Entropy

Overview Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bit...

5.9CVSS6.9AI score0.00381EPSS
Exploits1References2
Snyk
Snyk
added 2023/08/13 9:0 p.m.2 views

Insufficient Entropy

Overview Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bit...

5.9CVSS6.9AI score0.00381EPSS
Exploits1References2
Snyk
Snyk
added 2023/08/13 9:0 p.m.3 views

Insufficient Entropy

Overview Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bit...

5.9CVSS6.8AI score0.00381EPSS
Exploits1References2
Snyk
Snyk
added 2023/08/13 9:0 p.m.3 views

Insufficient Entropy

Overview Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bit...

5.9CVSS6.9AI score0.00381EPSS
Exploits1References2
Snyk
Snyk
added 2023/08/13 9:0 p.m.2 views

Insufficient Entropy

Overview Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bit...

5.9CVSS6.9AI score0.00381EPSS
Exploits1References2
Rows per page
Query Builder