Lucene search
+L

828 matches found

Positive Technologies
Positive Technologies
•added 2021/01/13 12:00 a.m.•13 views

PT-2021-9113 · Ibm · Ibm Security Guardium Data Encryption

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Data Encryption GDE version 3.0.0.2 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: F...

7.5CVSS6.5AI score0.00578EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/13 12:00 a.m.•2 views

CVE-2020-4595: Use of a Broken or Risky Cryptographic Algorithm

IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184819...

7.5CVSS6.2AI score0.00783EPSS
SaveExploits0References2
OSV
OSV
•added 2021/01/07 6:15 p.m.•10 views

CVE-2020-4898

IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989...

7.5CVSS6.5AI score0.00783EPSS
SaveExploits0References2
NVD
NVD
•added 2021/01/07 6:15 p.m.•21 views

CVE-2020-4898

IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989...

7.5CVSS6.1AI score0.00783EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/01/07 5:40 p.m.•25 views

CVE-2020-4898

IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989...

5.9CVSS7.2AI score0.00783EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/07 12:00 a.m.•1 views

CVE-2020-4898: Use of a Broken or Risky Cryptographic Algorithm

IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989...

7.5CVSS5.8AI score0.00783EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/01/06 12:00 a.m.•5 views

CVE-2020-4898

IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989...

7.5CVSS5.3AI score0.00783EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/01/05 10:15 p.m.•8 views

CVE-2020-23250

GigaVUE-OS GVOS 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database...

2.3CVSS5.8AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/12/09 12:00 a.m.•14 views

PT-2020-19565 · Mcafee · Mcafee Database Security Server/Sensor

Name of the Vulnerable Software and Affected Versions: McAfee Database Security Server and Sensor versions prior to 4.8.0 Description: The issue is related to the use of a broken or risky cryptographic algorithm in the form of a SHA1 signed certificate. This could allow an attacker on the same...

6.3CVSS6AI score0.00174EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
•added 2020/12/01 12:00 a.m.•8 views

The vulnerability of the client component of the PostgreSQL database management system allows a hacker to execute a type of “man-in-the-middle” attack.

The vulnerability of the client component of the PostgreSQL database management system is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” type attack...

9.8CVSS7.4AI score0.01593EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
•added 2020/12/01 12:00 a.m.•12 views

The vulnerability of the HTTP connection QuickConnect function in the Synology Router Manager operating system allows a perpetrator to execute a type of “man-in-the-middle” attack.

The vulnerability of the HTTP connection QuickConnect function in the Synology Router Manager operating system is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” attack remote...

8.3CVSS7.8AI score0.00832EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2020/11/30 4:15 p.m.•26 views

Information disclosure

IBM Cloud Pak for Security 1.3.0.1 CP4S uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information...

5CVSS5.2AI score0.00735EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/30 12:00 a.m.•2 views

CVE-2020-4624: Use of a Broken or Risky Cryptographic Algorithm

IBM Cloud Pak for Security 1.3.0.1 CP4S uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information...

5.3CVSS5.8AI score0.00735EPSS
SaveExploits0References2
OSV
OSV
•added 2020/11/20 2:15 p.m.•12 views

CVE-2020-4937

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 191814...

7.5CVSS6.5AI score0.00792EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/11/19 12:00 a.m.•4 views

CVE-2020-4937

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 191814...

7.5CVSS5.3AI score0.00792EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2020/10/29 12:00 a.m.•16 views

PT-2020-4927 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.2.4-8081 Description: The issue concerns a problem with the QuickConnect feature in Synology Router Manager, which allows for a man-in-the-middle attack. This could enable an attacker to spoof...

8.3CVSS9.2AI score0.00832EPSS
SaveExploits1References8
OSV
OSV
•added 2020/10/16 5:15 p.m.•12 views

CVE-2020-4254

IBM Security Guardium Big Data Intelligence 1.0 SonarG uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560...

7.5CVSS6.5AI score0.00792EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/10/16 4:40 p.m.•28 views

CVE-2020-4254

IBM Security Guardium Big Data Intelligence 1.0 SonarG uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560...

5.9CVSS7.2AI score0.00792EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/10/09 12:00 a.m.•1372 views

PHP 7.2 < 7.2.34 / 7.3.x < 7.3.23 / 7.4.x < 7.4.11 Mulitiple Vulnerabilities

According to its self-reported version number, the version of PHP running on the remote web server is 7.2.x prior to 7.2.34, 7.3.x prior to 7.3.23 or 7.4.x prior to 7.4.11. It is, therefore, affected by multiple vulnerabilties: - A weak cryptography vulnerability exists in PHP's opensslencrypt...

6.5CVSS7AI score0.05029EPSS
SaveExploits1References7
OSV
OSV
•added 2020/10/06 6:15 p.m.•16 views

CVE-2019-4325

"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...

5.3CVSS6.1AI score0.00542EPSS
SaveExploits0References1
Rows per page
Query Builder