PT-2019-16931 · Ibm · Ibm Security Access Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager versions 9.0.1 through 9.0.6 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: Fo...

Stronger algorithm used to digest instance admin password

Let's use PKCS5S2...

Stronger algorithm used to digest instance admin password

Let's use PKCS5S2...

Unfixed XSS vulnerability at www.romicon.co.il

Security researcher Stronger, has submitted on 01/01/2009 a cross-site-scripting XSS vulnerability affecting www.romicon.co.il, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is currently...

PT-2008-4605 · Suse · Opensuse

Name of the Vulnerable Software and Affected Versions: SUSE openSUSE version 11.0 Description: The issue makes it easier for attackers to conduct brute-force attacks against hashed passwords due to the use of the DES algorithm when the configuration specifies the MD5 algorithm. Recommendations: F...

PT-2005-3792 · Openssl +1 · Openssl +2

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 0.9.8 Description: The issue is related to the default configuration of OpenSSL, which uses MD5 for creating message digests. This makes it easier for remote attackers to forge certificates with a valid certificate...

PT-2002-2632 · Click2Learn · Click2Learn Ingenium Learning Management System

Name of the Vulnerable Software and Affected Versions: Click2Learn Ingenium Learning Management System versions 5.1 through 6.1 Description: The issue concerns the use of weak encryption for passwords in the affected software, specifically a reversible algorithm. This weakness allows attackers to...

PT-1997-1155 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT account policy for passwords that has inappropriate security-critical settings. This includes settings for password length, password age, or uniqueness...