125 matches found
CVE-2025-67168
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords...
CVE-2025-67168
RiteCMS v3.1.0 is affected by CVE-2025-67168 due to insecure password storage via weak encryption. Multiple sources (NVD, Red Hat, EUVD, CNVD, OSV, CNVD) describe the issue consistently; root cause is insecure password encryption, with impact limited to confidentiality (C: Low) and no integrity/a...
RiteCMS 安全漏洞
RiteCMS is an open source content management system based on php and sqlite. An unspecified vulnerability exists in RiteCMS that stems from the use of insecure encryption to store passwords. No detailed vulnerability details are provided at this time...
PT-2025-51863
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords...
CVE-2025-67168
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords...
CVE-2025-67168
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords...
Inadequate Encryption Strength
Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...
EUVD-2025-34531
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...
SAMSUNG Smart Switch 安全漏洞
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from the use of an insecure encryption algorithm that could lead to a local attacker replacing the recovery application...
CVE-2025-48981
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...
EUVD-2013-7064
Malware in sbrugna...
EUVD-2024-21075
Malicious code in bioql PyPI...
EUVD-2023-40553
Malicious code in bioql PyPI...
EUVD-2024-21074
Malicious code in bioql PyPI...
EUVD-2023-33928
Malicious code in bioql PyPI...
EUVD-2022-32827
Malicious code in bioql PyPI...
CVE-2025-59484
The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm...
CVE-2025-59484
CVE-2025-59484 affects AutomationDirect CLICK PLUS firmware 3.60, where an insecure RSA implementation enables use of a broken cryptographic algorithm. Public sources (NVD/Red Hat CVEs, CVE list, PT Security, and CISA advisory) describe the issue and confirm the affected device (Click Plus PLC) a...
CVE-2025-59054 dstack has insecure LUKS2 persistent storage partitions that may be opened and used
dstack is a software development kit SDK to simplify the deployment of arbitrary containerized apps into trusted execution environments. In versions of dstack prior to 0.5.4, a malicious host may provide a crafted LUKS2 data volume to a dstack CVM for use as the /data mount. The guest will open t...
Linux Distros Unpatched Vulnerability : CVE-2020-11031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a...