6213 matches found
CVE-2018-15717
Open Dental before version 18.4 stores user passwords as base64-encoded MD5 hashes, a weak hashing method exposing credentials if hashes are exposed. The affected software is Open Dental, with the cutoff version noted as pre-18.4. The CVE entry indicates the vulnerability’s existence but does not...
CVE-2018-15717: Use of Password Hash With Insufficient Computational Effort
Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes...
[slackware-security] mozilla-nss
New mozilla-nss packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-nss-3.40.1-i586-1slack14.2.txz: Upgraded. Upgraded to nss-3.40.1 and nspr-4.20. Mitigate cache side-channel...
Important: Red Hat Bug Fix Advisory: cockpit bug fix update
Updated cockpit packages that fix two bugs are now available for Red Hat Enterprise Linux 7 Extras. Cockpit is a server administration interface that makes it easy to administer GNU/Linux servers through a web browser. This update fixes two bugs, including this: The cockpit dashboard has been...
HASSH - A Network Fingerprinting Standard Which Can Be Used To Identify Specific Client And Server SSH Implementations
"HASSH" is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of an MD5 fingerprint. What can HASSH help with: Use in highly controlled, well understood environments...
Open Source IPS: Suricata
Suricata is a free and open source, mature, fast and robust network threat detection engine. The Suricata engine is capable of real time intrusion detection IDS, inline intrusion prevention IPS, network security monitoring NSM and offline pcap processing. Suricata inspects the network traffic usi...
WordPress 3.9.x < 3.9.21 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...
WordPress 3.7.x < 3.7.23 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...
WordPress 4.0.x < 4.0.20 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...
WordPress 4.2.x < 4.2.17 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...
WordPress 4.8.x < 4.8.3 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...
WordPress 4.7.x < 4.7.7 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...
WordPress 4.4.x < 4.4.12 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...
WordPress 4.6.x < 4.6.8 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...
WordPress 3.8.x < 3.8.23 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...
Design/Logic Flaw
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash...
CVE-2018-18587
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash...
CVE-2018-18587
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash...
CVE-2018-18587
CVE-2018-18587 affects BigProf AppGini 5.70, where passwords are stored in the database using MD5. The root cause is the use of MD5 hashing for password storage, leading to potential compromise of credentials (information disclosure). Connected sources corroborate the MD5-based storage in AppGini...