CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

13570 matches found

Github Security Blog•added 2022/04/06 12:01 a.m.•29 views

Weak password hash in LiveHelperChat

The secrethash, which the application relies for multiple security measures, can be brute-forced. The hash is quite small, with only 10 characters of only hexadecimal, making 16^10 possilibities 1.099.511.627.776 . The SHA1 of the secret can be obtained via a captcha string and brute-forced offli...

8.2CVSS2.6AI score0.00556EPSS

SaveExploits1References4Affected Software1

OSV•added 2022/04/06 12:01 a.m.•19 views

GHSA-VX8V-G3P3-88VG Weak password hash in LiveHelperChat

7.5CVSS8.1AI score0.00556EPSS

SaveExploits1References4

FreeBSD Advisory•added 2022/04/06 12:00 a.m.•23 views

FreeBSD-SA-22:08.zlib

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:08.zlib Security Advisory The FreeBSD Project Topic: zlib compression out-of-bounds write Category: zlib Module: contrib Announced: 2022-04-06 Credits: Danil...

7.5CVSS7AI score0.51733EPSS

SaveExploits1

Oracle linux•added 2022/04/06 12:00 a.m.•101 views

libgcrypt security update

1.8.5-6fips - Add API to provide hash calculation in RSA/DSA/ECDSA signature operations Orabug: 33081130 - Change Epoch from 1 to 10 1.8.5-6 - Fix for CVE-2021-33560 1971421 - Enable HW optimizations in FIPS 1976137 - Performance enchancements for ChaCha20 and Poly1305 1855231 1.8.5-5 - Performan...

7.5CVSS0.8AI score0.02342EPSS

SaveExploits0

FreeBSD Advisory•added 2022/04/06 12:00 a.m.•16 views

FreeBSD-SA-22:06.ioctl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:06.ioctl Security Advisory The FreeBSD Project Topic: mpr/mps/mpt driver ioctl heap out-of-bounds write Category: core Module: mpr, mps, mpt Announced:...

9.8CVSS7.4AI score0.00447EPSS

SaveExploits0

OSV•added 2022/04/05 4:15 p.m.•7 views

CVE-2021-41752

Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt function...

9.8CVSS5.8AI score0.01214EPSS

SaveExploits1References1

ATTACKERKB•added 2022/04/05 7:15 a.m.•8 views

CVE-2022-1235

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...

8.2CVSS7.2AI score0.00556EPSS

SaveExploits1References3

Positive Technologies•added 2022/04/05 12:00 a.m.•9 views

PT-2022-11476 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript versions prior to commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 Description: The issue is caused by an unbounded recursive call to the new opt function, leading to a stack overflow. This occurs in Jerryscript before the specifie...

9.8CVSS9.3AI score0.01214EPSS

SaveExploits1References7

ATTACKERKB•added 2022/04/03 4:15 a.m.•5 views

CVE-2022-28376

Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone knowing the device's serial number to access a CPE admin website, e.g., at the 10.0.0.1 IP address. The password for the verizon username is calculated by concatenating the serial number and the model i.e., the LVSKIHP string...

8.1CVSS5.9AI score0.01233EPSS

SaveExploits1References3

ATTACKERKB•added 2022/04/01 11:15 p.m.•7 views

CVE-2022-25155

Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC...

8.1CVSS6.9AI score0.02134EPSS

SaveExploits0References4

NVD•added 2022/04/01 11:15 p.m.•31 views

CVE-2022-25156

Use of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series R04/08/16/32/120ENCPU all...

8.1CVSS0.01258EPSS

SaveExploits0References3

ATTACKERKB•added 2022/04/01 11:15 p.m.•8 views

CVE-2022-25156

8.1CVSS6.9AI score0.01258EPSS

SaveExploits0References4

ATTACKERKB•added 2022/04/01 11:15 p.m.•8 views

CVE-2022-25158

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...

9.1CVSS7.1AI score0.01371EPSS

SaveExploits0References4

ATTACKERKB•added 2022/04/01 11:15 p.m.•9 views

CVE-2022-25157

9.1CVSS7.1AI score0.02382EPSS

SaveExploits0References4

NVD•added 2022/04/01 11:15 p.m.•27 views

CVE-2022-25155

8.1CVSS0.02134EPSS

SaveExploits0References3

NVD•added 2022/04/01 11:15 p.m.•25 views

CVE-2022-25158

9.1CVSS0.01371EPSS

SaveExploits0References3

Prion•added 2022/04/01 11:15 p.m.•24 views

Authentication flaw

6.4CVSS9.2AI score0.02382EPSS

SaveExploits0References3

Prion•added 2022/04/01 11:15 p.m.•27 views

Code injection

6.8CVSS8.2AI score0.01258EPSS

SaveExploits0References3

Prion•added 2022/04/01 11:15 p.m.•26 views

Design/Logic Flaw

6.4CVSS9.2AI score0.01371EPSS

SaveExploits0References3

Prion•added 2022/04/01 11:15 p.m.•23 views

Authentication flaw

6.8CVSS8.2AI score0.02134EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by