2 matches found
Insecure AES Initialization Vector
PyPinkSign is vulnerable to the Insecure Initialization Vector. The vulnerability is due to usage of static Initialization Vector for AES encryption. This could lead to Information Disclosure...
7.5CVSS7AI score0.00406EPSS
SaveExploits0References4Affected Software1
Gentoo Security Advisory GLSA 200603-15 (crypt-cbc)
The remote host is missing updates announced in advisory GLSA 200603-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
2.6CVSS6.7AI score0.01397EPSS
SaveExploits0References3
20