DEBIAN-CVE-2015-2936

MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...

CVE-2015-2936

MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...

Default credentials

MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...

UBUNTU-CVE-2015-2936

MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...

CVE-2015-2936

MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service CPU consumption via a long password...

CVE-2015-0995

Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a brute-force attack...

[SECURITY] Fedora 20 Update: jBCrypt-0.4-1.fc20

A Java implementation of OpenBSD's Blowfish password hashing code...

[SECURITY] Fedora 21 Update: jBCrypt-0.4-1.fc21

A Java implementation of OpenBSD's Blowfish password hashing code...

[SECURITY] Fedora 22 Update: jBCrypt-0.4-1.fc22

A Java implementation of OpenBSD's Blowfish password hashing code...

Vulnerability in the jBCrypt key stretching process

Overview jBCrypt is a Java implementation to compute password hashes. jBCrypt contains an integer overflow vulnerability in the key stretching process. An integer overflow occurs when the parameter for the repetition count is set to the maximum value allowed, 31. Norito AGETSUMA reported this...

Siemens SIMATIC STEP 7 (TIA Portal) < 1300.100.2501.1 Multiple Vulnerabilities (SSA-315836)

Binary data scadasiemenstiamultiplevulnerabilitiesSSA-315836.nbin...

FancyFon FAMOC Cryptographic Hash Algorithm Vulnerability

FancyFon FAMOC is a mobile device management platform. FancyFon FAMOC suffers from a password hashing algorithm vulnerability that can be exploited by an attacker to conduct a brute force attack and obtain a user's password...

CVE-2014-9251

Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack on hash values in the database, aka ZEN-15413...

Cross site scripting

Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack on hash values in the database, aka ZEN-15413...

CVE-2014-9251

Zenoss Core up to 5 Beta 3 uses a weak password-hashing algorithm, enabling context-dependent attackers to obtain plaintext passwords by brute-forcing stored hashes in the database (ZEN-15413). CVSS v2 base score 5.0 (Medium) as per NVD.

CVE-2014-9251

Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack on hash values in the database, aka ZEN-15413...

Zenoss < 4.2.5 Multiple Vulnerabilities

Binary data 8594.prm...

Drupal Password Hashing Denial of Service Vulnerability

A vulnerability in the password hashing API of Drupal 7 can lead to a DoS. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Updated drupal packages fix security vulnerabilities

Updated drupal packages fix security vulnerability: Aaron Averill discovered that a specially crafted request can give a user access to another user's session, allowing an attacker to hijack a random session CVE-2014-9015. Michael Cullum, Javier Nieto and Andres Rojas Guerrero discovered that the...

CVE-2014-9034

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service CPU consumption via a long password that is improperly handled during hashing, a similar issue to CVE-2014-9016...