CVE-2020-13777

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3. The earliest affected version is 3.6.4 2018-09-24 because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS...

CVE-2020-11501

GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 2018-07-16 because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks...

CVE-2017-7728

On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands e.g., setting the alarm on/off, related to incorrect cryptography...

PT-2017-17912

Name of the Vulnerable Software and Affected Versions iSmartAlarm cube devices affected versions not specified Description The issue is related to incorrect cryptography, leading to authentication bypass. This allows for the remote execution of commands, such as setting the alarm on or off...

CVE-2017-7728: Undefined Security Weakness

On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands e.g., setting the alarm on/off, related to incorrect cryptography...

Spider Sales shopping cart software multiple security vulnerabilities

S-Quadra Advisory 2004-03-03 Topic: Spider Sales shopping cart software multiple security vulnerabilities Severity: High Vendor URL: http://www.spidersales.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040303.txt Release date: 03 Mar 2004 1. DESCRIPTION "Spider Sales is a powerful...