Lucene search
K

27 matches found

OSV
OSV
added 2019/02/13 4:29 p.m.2 views

CVE-2018-15781

The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerability. An unauthenticated remote attacker could reverse engineer the cryptographic system used in the Dell Wyse Password Encoder to discover the hard coded private key and decryp...

8CVSS5.8AI score0.00826EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2017/03/02 12:0 a.m.3 views

The vulnerability of the iOS operating system, which allows a hacker to facilitate the process of file decryption

The vulnerability of the iTunes Backup component in the iOS operating system is related to incorrect hashing of passwords. Exploiting this vulnerability can allow a malicious actor to facilitate the decryption process for files remotely...

4.3CVSS6.5AI score0.00583EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.4 views

The vulnerability of the JRockit software platform allows a malicious actor to simplify the process of decoding messages remotely.

A vulnerability in the JRockit software platform is related to a bug in the ssl3getkeyexchange function in the s3clnt.c file of the OpenSSL cryptographic library. Exploiting this vulnerability could allow an attacker to simplify the decryption process by using an insufficiently secure RSA key...

4.3CVSS6.9AI score0.98685EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.2 views

The vulnerability of the Java Platform software platform allows a malicious actor to simplify the process of decoding messages remotely.

A vulnerability in the Java Platform software framework, related to a bug in the ssl3getkeyexchange function in the s3clnt.c file of the OpenSSL cryptographic library. Exploiting this vulnerability could allow an attacker to simplify the decryption process by using an insufficiently secure RSA ke...

4.3CVSS6.9AI score0.98685EPSS
Exploits0References3
OSV
OSV
added 2016/03/02 11:59 a.m.9 views

CVE-2016-0704

An oracle protection mechanism in the getclientmasterkey function in s2srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier fo...

5.9CVSS6.3AI score
Exploits0References29
OSV
OSV
added 2011/03/18 4:55 p.m.1 views

DEBIAN-CVE-2009-5057

The S/MIME feature in Open Ticket Request System OTRS before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations,...

5CVSS6.7AI score0.01691EPSS
Exploits0References1
NVD
NVD
added 1995/03/03 5:0 a.m.18 views

CVE-1999-1098

Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing...

5CVSS0.01363EPSS
Exploits0References4
Rows per page
Query Builder