Lucene search
+L

716 matches found

SUSE CVE
SUSE CVE
added 2023/11/11 1:51 a.m.6 views

SUSE CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS6.7AI score0.0048EPSS
SaveExploits1References3
Veracode
Veracode
added 2023/11/10 10:39 a.m.24 views

Weak Cryptography

esptool is vulnerable to weak cryptography. The vulnerability is due to the libraries usage of the AES ECB algorithm, which could allow an attacker to access sensitive information in system...

7.5CVSS6.6AI score0.0048EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.11 views

The vulnerability of the Identity Manager software component, used for managing and controlling access to corporate resources and IBM Security Verify Governance applications, allows a perpetrator to gain access to confidential information.

The vulnerability of the Identity Manager software component, which is used for managing and controlling access to corporate resources and applications in IBM Security Verify Governance, is related to the use of weak cryptographic algorithms. Exploiting this vulnerability could allow a malicious...

7.8CVSS7.2AI score0.00404EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/11/09 6:34 p.m.14 views

GHSA-3F38-96QM-R3FW esptool allows attackers to view sensitive information via weak cryptographic algorithm

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS5.9AI score0.0048EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/11/09 4:15 p.m.6 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS5.8AI score0.0048EPSS
SaveExploits1References2
PyPA
PyPA
added 2023/11/09 4:15 p.m.8 views

PYSEC-2023-234

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS6.6AI score0.0048EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/11/09 12:00 a.m.16 views

Espressif Systems esptool Security Vulnerability

Espressif Systems esptool is a Python-based, open-source, platform-independent utility program from Espressif Systems that communicates with the ROM bootloader in the Espressif chip. A security vulnerability exists in Espressif Systems esptool version 4.6.2. An attacker could exploit this...

7.5CVSS6.4AI score0.0048EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.5 views

PT-2023-8438 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server version 11.5 Description: The issue is related to the use of defective cryptographic algorithms, which can allow a remote attacker to gain unauthorized access to protected...

7.5CVSS8.5AI score0.00577EPSS
SaveExploits0References9
OSV
OSV
added 2023/10/25 6:32 p.m.18 views

GHSA-7G24-QG88-P43Q jose4j uses weak cryptographic algorithm

jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less...

7.5CVSS6.9AI score0.00644EPSS
SaveExploits0References5
OSV
OSV
added 2023/10/11 7:15 a.m.7 views

CVE-2022-44757

BigFix Insights for Vulnerability Remediation IVR uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc...

8.2CVSS5.8AI score0.00329EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/11 7:15 a.m.27 views

Design/Logic Flaw

BigFix Insights for Vulnerability Remediation IVR uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc...

6.4CVSS8.1AI score0.00329EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/11 6:13 a.m.17 views

CVE-2022-44757 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography

BigFix Insights for Vulnerability Remediation IVR uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc...

6.5CVSS6.9AI score0.00329EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/11 6:13 a.m.36 views

CVE-2022-44757 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography

BigFix Insights for Vulnerability Remediation IVR uses weak cryptography that can lead to credential exposure. An attacker could gain access to sensitive information, modify data in unexpected ways, etc...

6.5CVSS8.4AI score0.00329EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/11 6:13 a.m.60 views

CVE-2022-44757

BigFix Insights for Vulnerability Remediation (IVR) is documented to use weak cryptography, leading to credential exposure. The vulnerability can allow an attacker to access sensitive information and modify data. Several sources (including NVD/CVE and related aggregations) confirm the weak-crypto...

8.2CVSS7.2AI score0.00329EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/11 12:00 a.m.8 views

PT-2023-14549 · Ibm · Insights For Vulnerability Remediation

Name of the Vulnerable Software and Affected Versions: BigFix Insights for Vulnerability Remediation IVR affected versions not specified Description: The issue concerns the use of weak cryptography, which can lead to credential exposure. An attacker could potentially gain access to sensitive...

8.2CVSS8AI score0.00329EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/06 10:15 p.m.10 views

CVE-2022-33160

IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228568...

7.5CVSS5.8AI score0.00277EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/27 11:15 p.m.8 views

CVE-2023-38730

IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268...

7.5CVSS5.8AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/27 12:00 a.m.17 views

PT-2023-26578 · Ibm · Ibm Storage Copy Data Management

Name of the Vulnerable Software and Affected Versions: IBM Storage Copy Data Management versions 2.2.0.0 through 2.2.19.0 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...

7.5CVSS7.2AI score0.00382EPSS
SaveExploits0References8
Veracode
Veracode
added 2023/08/10 9:35 a.m.15 views

Weak Cryptography

github.com/supranational/blst is vulnerable to Weak Cryptography. The vulnerability exists due to logic errors in SigValidate function which results in group-check omission...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/08/02 12:00 a.m.15 views

Moxa EDR-810 Web Server Weak Cryptography for Passwords (CVE-2017-12129)

An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and could brute force them. This plugin only works with Tenable.ot. Please visit...

8CVSS5.6AI score0.00647EPSS
SaveExploits2References2
Rows per page
Query Builder