Lucene search
+L

141 matches found

ATTACKERKB
ATTACKERKB
added 2021/04/26 7:15 p.m.4 views

CVE-2021-31646

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...

9.8CVSS7AI score0.01339EPSS
SaveExploits0References4
Prion
Prion
added 2021/04/26 7:15 p.m.20 views

Default credentials

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...

7.5CVSS9.6AI score0.01339EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/04/26 6:7 p.m.25 views

CVE-2021-31646

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...

9.8AI score0.01339EPSS
SaveExploits0References3
OSV
OSV
added 2021/02/06 12:15 a.m.6 views

CVE-2021-22307

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/06 12:15 a.m.29 views

CVE-2021-22307

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

5.5CVSS0.00199EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/06 12:15 a.m.3 views

CVE-2021-22307

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/06 12:15 a.m.20 views

Design/Logic Flaw

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

2.1CVSS5.4AI score0.00199EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/02/06 12:0 a.m.34 views

CVE-2021-22307

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

5.7AI score0.00199EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/06 12:0 a.m.104 views

CVE-2021-22307

CVE-2021-22307 affects Huawei Mate 30 smartphones with firmware 10.0.0.203 (C00E201R7P2). The issue is a weak algorithm that leaves protection for certain modules insufficient, allowing local attackers to compromise module integrity. CVSS indicates LOCAL access, low attack complexity, with HIGH i...

5.5CVSS5.4AI score0.00199EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/02/05 12:0 a.m.12 views

Huawei Mate 30 安全漏洞

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. A weak algorithm vulnerability exists in Huawei Mate 30 version 10.0.0.203 C00E201R7P2. The vulnerability stems from the program not adequately protecting against protected modules. A local attacker could exploit the...

5.5CVSS6AI score0.00199EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/01/29 12:0 a.m.53 views

Huawei Mate 30 Weak Algorithm Vulnerability (CVE-2021-22307)

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. A weak algorithm vulnerability exists in Huawei Mate 30 version 10.0.0.203 C00E201R7P2. The vulnerability stems from the program not adequately protecting against protected modules. A local attacker could exploit the...

5.5CVSS6.4AI score0.00199EPSS
SaveExploits0References1
Huawei
Huawei
added 2021/01/27 12:0 a.m.29 views

Security Advisory - Weak Algorithms Vulnerability in Huawei Smartphone

There is a weak algorithm vulnerability in Huawei smartphone. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module. Vulnerability ID: HWPSIRT-2020-37421 This vulnerability has been assigne...

5.5CVSS5.4AI score0.00199EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2021/01/05 10:15 p.m.26 views

CVE-2020-23250

GigaVUE-OS GVOS 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database...

2.3CVSS3.8AI score0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/01/05 9:47 p.m.25 views

CVE-2020-23250

GigaVUE-OS GVOS 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database...

3.8AI score0.00196EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/05 9:47 p.m.53 views

CVE-2020-23250

GigaVUE-OS (GVOS) versions 5.4–5.9 are affected by a vulnerability stemming from the use of a weak hashing algorithm for data stored in the internal database. Root cause: weak hash algorithm. Documented impact is low (CVSS v3.1: 2.3) with local access required and no user interaction. No exploit ...

2.3CVSS4.1AI score0.00196EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/11/19 10:56 p.m.22 views

Security Bulletin: Cryptographic Vulnerability Affects Map Editor in IBM Sterling B2B Integrator (CVE-2020-4937)

Summary IBM Sterling B2B Integrator has addressed a weak cryptographic algorithm vulnerability in the Map Tester of the Map Editor. Vulnerability Details CVEID: CVE-2020-4937 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition uses weaker than expected cryptographic algorithms that could...

7.5CVSS1AI score0.00783EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.13 views

The vulnerability of the PuTTY encryption protection tool lies in the use of a less secure encryption algorithm, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PuTTY encryption method lies in the use of a not sufficiently secure encryption algorithm. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.7AI score0.03937EPSS
SaveExploits0References6Affected Software4
OpenVAS
OpenVAS
added 2020/06/25 12:0 a.m.27 views

Huawei Data Communication: Weak Algorithm Vulnerability in Some Huawei Products (huawei-sa-20200108-01-rsa)

There is a weak algorithm vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

5.3CVSS5.4AI score0.00452EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/06/05 12:0 a.m.40 views

Huawei Data Communication: Weak Algorithm Vulnerability in Some Huawei Products (huawei-sa-20190821-02-algorithm)

There is a weak algorithm vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

0.1AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/06/05 12:0 a.m.26 views

Huawei Data Communication: Weak Algorithm Vulnerability in Huawei VRP Platform (huawei-sa-20191204-01-vrp)

There is a weak algorithm vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

7.5CVSS7.6AI score0.00764EPSS
SaveExploits0References1
Rows per page
Query Builder