Lucene search
K

7 matches found

SUSE CVE
SUSE CVE
added 2023/12/19 12:8 a.m.2 views

SUSE CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS...

6.8CVSS6.8AI score0.00203EPSS
Exploits1References14
NVD
NVD
added 2023/11/28 7:15 a.m.20 views

CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS...

6.8CVSS0.00203EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/04/18 5:3 p.m.4 views

CVE-2023-25556

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation...

8.3CVSS8.6AI score0.00105EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.3 views

SUSE CVE-2007-0008

Integer underflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to...

6.8CVSS9.1AI score0.17415EPSS
Exploits0References6
OSV
OSV
added 2019/03/21 4:1 p.m.1 views

CVE-2019-5723

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using reversible encryption rather than as a hash value, and the used Vigenere algorithm is badly outdated. Moreover, the encryption key is static and too short. Due to this, the passwords stored by the applicatio...

9.8CVSS7.3AI score0.00142EPSS
Exploits3References3
OSV
OSV
added 2018/07/31 9:29 p.m.0 views

UBUNTU-CVE-2016-8614

A flaw was found in Ansible before version 2.2.0. The aptkey module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key...

7.5CVSS6.9AI score0.00102EPSS
Exploits1References6
PyPA
PyPA
added 2018/07/31 9:29 p.m.4 views

PYSEC-2018-37

A flaw was found in Ansible before version 2.2.0. The aptkey module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key...

7.5CVSS6.6AI score0.00102EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder