CVE-2013-7252

kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack...

Oracle PeopleSoft PeopleTools - insecure AccessID encryption

Application:Oracle PeopleSoft PeopleTools Versions Affected: Oracle PeopleSoft PeopleTools 8.53 / 8.50 Vendor URL: http://www.oracle.com Bugs: Insecure encryption Exploits: YES Reported: 11.06.2014 Vendor response: 12.06.2014 Date of Public Advisory: 17.10.2014 Reference: Oracle CPU October 2014...

Digipass Go3 Insecure Encryption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21040/info Digipass Go3 is prone to an insecure-encryption vulnerability because the device uses an insecure encryption algorithm to encrypt sensitive data. An attacker can exploit this issue to brute-force the encryption...

CVE-2012-4693

CVE-2012-4693 affects Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite, which store passwords in Ps_security.ini using a weak, reversible encryption. The vulnerability allows a local attacker with read access to Ps_security.ini to decrypt usernames and passwords and potent...

Digipass Go3 - Insecure Encryption

Digipass Go3 - Insecure Encryption // source: https://www.securityfocus.com/bid/21040/info Digipass Go3 is prone to an insecure-encryption vulnerability because the device uses an insecure encryption algorithm to encrypt sensitive data. An attacker can exploit this issue to brute-force the...

Digipass Go3 - Insecure Encryption

// source: https://www.securityfocus.com/bid/21040/info Digipass Go3 is prone to an insecure-encryption vulnerability because the device uses an insecure encryption algorithm to encrypt sensitive data. An attacker can exploit this issue to brute-force the encryption key and gain access to...