Lucene search
+L

15620 matches found

Cvelist
Cvelist
•added 2021/12/25 1:04 a.m.•55 views

CVE-2021-45486

In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small...

5.9AI score0.00368EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/12/25 1:04 a.m.•82 views

CVE-2021-45486

In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small...

3.5CVSS6.1AI score0.00368EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/12/25 12:00 a.m.•6 views

Linux kernel 加密问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the IPv4 implementation of the Linux kernel prior to 5.12.4, where net IPv4 route.c suffers from...

3.5CVSS6.6AI score0.00368EPSS
SaveExploits0References30
CNNVD
CNNVD
•added 2021/12/25 12:00 a.m.•11 views

Linux kernel加密问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that stems from an information leak in the net IPv6 output core.c in the IPv6 implementation of the Linux kernel prior to...

7.5CVSS6.6AI score0.03615EPSS
SaveExploits0References29
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/25 12:00 a.m.•5 views

CVE-2021-45485: Use of a Broken or Risky Cryptographic Algorithm

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/outputcore.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses...

7.5CVSS6.8AI score0.03615EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2021/12/25 12:00 a.m.•3 views

PT-2021-27986

Name of the Vulnerable Software and Affected Versions PHP affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically relat...

5.8AI score
SaveExploits0References2
CVE
CVE
•added 2021/12/23 7:48 p.m.•62 views

CVE-2021-43989

The CVE-2021-43989 issue affects mySCADA myPRO versions 8.20.0 and earlier, where passwords are stored using MD5. The underlying risk is that MD5 password hashes may be cracked, exposing credential-related data. Reported in multiple sources (NVD/NVD-derived and ICS/CISA context), the vulnerabilit...

7.5CVSS7.7AI score0.00651EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/23 12:00 a.m.•12 views

PT-2021-23996 · Myscada · Myscada Mypro

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO versions 8.20.0 and prior Description: The issue concerns the storage of passwords using MD5, which may allow an attacker to crack previously retrieved password hashes. Recommendations: For mySCADA myPRO versions 8.20.0 and prio...

7.5CVSS7.5AI score0.00651EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•9 views

CVE-2021-43989: Use of Password Hash With Insufficient Computational Effort

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes...

7.5CVSS5.8AI score0.00651EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/22 12:00 a.m.•12 views

PT-2021-6619

Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description A NULL pointer dereference flaw was found in GnuTLS, related to the implementation of the wrap nettle hash fast function in the cryptographic library. This flaw can cause undefined behavior wh...

7.5CVSS6.9AI score0.01988EPSS
SaveExploits0References57
attackerkb
attackerkb
•added 2021/12/21 5:26 p.m.•17 views

CVE-2021-43989

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes...

7.5CVSS7.1AI score0.00651EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/21 12:00 a.m.•15 views

mySCADA myPRO 加密问题漏洞

mySCADA myPRO is an HMI/SCADA system designed primarily for the visualization and control of industrial processes. A security vulnerability exists in mySCADA myPRO that can be exploited by an attacker to crack a previously retrieved password hash...

7.5CVSS5.6AI score0.00651EPSS
SaveExploits0References4
ICS
ICS
•added 2021/12/21 12:00 a.m.•71 views

mySCADA myPRO

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: mySCADA Equipment: myPRO Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Use of Password Hash with Insufficient Computational Effort, Hidden Functionality, OS Command...

10CVSS10AI score0.01549EPSS
SaveExploits0References5
OSV
OSV
•added 2021/12/18 12:00 a.m.•14 views

GHSA-74XW-GWFM-7PV7 bounter Null pointer reference

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS6.7AI score0.01071EPSS
SaveExploits1References4
OSV
OSV
•added 2021/12/17 9:15 p.m.•16 views

CVE-2021-41497

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS5.8AI score0.01071EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/12/17 9:15 p.m.•8 views

CVE-2021-41497

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS7.1AI score0.01071EPSS
SaveExploits1References2
PyPA
PyPA
•added 2021/12/17 9:15 p.m.•17 views

PYSEC-2021-880

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS6.9AI score0.01071EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/12/17 9:15 p.m.•15 views

PYSEC-2021-880

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS7AI score0.01071EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/17 12:00 a.m.•3 views

CVE-2021-41497: NULL Pointer Dereference

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS5.7AI score0.01071EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/12/16 8:15 p.m.•9 views

CVE-2021-3179

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...

5.5CVSS6AI score0.00455EPSS
SaveExploits0References5
Rows per page
Query Builder