Lucene search
+L

2293 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•5 views

CVE-2023-50475: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in bcoin-org bcoin version 2.2.0, allows remote attackers to obtain sensitive information via weak hashing algorithms in the component \vendor\faye-websocket.js...

9.1CVSS8.1AI score0.0054EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/04 11:15 p.m.•10 views

CVE-2023-24047

An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm...

9.8CVSS5.9AI score0.00726EPSS
SaveExploits1References2
OSV
OSV
•added 2023/12/04 11:15 p.m.•11 views

CVE-2023-24047

An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm...

6.8CVSS6.7AI score0.00726EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/04 11:15 p.m.•28 views

CVE-2023-24047

An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm...

8CVSS0.00374EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/04 11:15 p.m.•26 views

Design/Logic Flaw

An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm...

4.7CVSS7.4AI score0.00726EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/12/04 12:00 a.m.•37 views

CVE-2023-24047

An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm...

7AI score0.00374EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•4 views

CVE-2023-24047: Insufficiently Protected Credentials

An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm...

8CVSS6.6AI score0.00374EPSS
SaveExploits0References3
CVE
CVE
•added 2023/12/04 12:00 a.m.•67 views

CVE-2023-24047

An Insecure Credential Management issue exists in the Connectize AC21000 G6 641.139.1.1256 router. The vulnerability stems from the use of a weak hashing algorithm , which allows an attacker to achieve escalated privileges . While the vulnerability has been observed in the wild, specific exploit ...

8CVSS6.7AI score0.00374EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/12/04 12:00 a.m.•11 views

CVE-2023-24047

An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashing algorithm...

7.1AI score0.00374EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/11/14 8:28 p.m.•80 views

Fabric vulnerable to crosslinking transaction attack

Short summary Combining two molecules to one another, called "cross-linking" results in a molecule with a chemical formula that is composed of all atoms of the original two molecules. In Fabric, one can take a block of transactions and cross-link the transactions in a way that alters the way the...

7.1CVSS6.6AI score0.00519EPSS
SaveExploits1References9Affected Software1
Mend
Mend
•added 2023/11/14 8:23 p.m.•3 views

CVE-2023-46132

Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" results in a molecule with a chemical formula that is composed of all atoms of the original two molecules. In Fabric, one can take a block of transactions...

7.1CVSS0.00519EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•5 views

CVE-2023-46132: Concurrent Execution using Shared Resource with Improper Synchronization

Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" results in a molecule with a chemical formula that is composed of all atoms of the original two molecules. In Fabric, one can take a block of transactions...

7.1CVSS6.6AI score0.00519EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/03 1:15 a.m.•25 views

CVE-2017-7252

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password...

7.5CVSS7.2AI score
SaveExploits0References2
NVD
NVD
•added 2023/11/03 1:15 a.m.•39 views

CVE-2017-7252

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password...

7.5CVSS7.5AI score0.00315EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/03 1:15 a.m.•25 views

Default credentials

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password...

5CVSS7.5AI score0.00315EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/11/03 1:15 a.m.•59 views

CVE-2017-7252

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password...

7.5CVSS7.1AI score0.00315EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/11/03 12:00 a.m.•43 views

CVE-2017-7252

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password...

7.5AI score0.00315EPSS
SaveExploits0References2
CVE
CVE
•added 2023/11/03 12:00 a.m.•73 views

CVE-2017-7252

CVE-2017-7252 affects Botan's bcrypt implementation prior to 2.1.0, where passwords with lengths 57–72 are not handled correctly, making it easier to determine the cleartext password. The connected documents corroborate the issue but do not provide an explicit remediation version; no exploit deta...

7.5CVSS7.5AI score0.00315EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/03 12:00 a.m.•62 views

CVE-2017-7252

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password...

6.9AI score0.00315EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/03 12:00 a.m.•4 views

CVE-2017-7252: Cleartext Transmission of Sensitive Information

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password...

7.5CVSS7.2AI score0.00315EPSS
SaveExploits0References2
Rows per page
Query Builder