951 matches found
CVE-2015-7286: Undefined Security Weakness
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol traffic...
VCE Vision Intelligent Operations weak cryptography
Weak cyphers usage, sensitive information transmitted in cleartext...
Apple Mac OS X multiple security vulnerabilities
Buffer overflows, DoS, memory corruption, restrictions bypass, weak cryptography...
Apple TV multiple security vulnerabilities
Weak cryptography, memory corruption, restrictions bypass...
Apple iOS multiple security vulnerabilities
Buffer overflows, DoS, memory corruption, restrictions bypass, weak cryptography...
CVE-2014-5386: Undefined Security Weakness
The mcryptcreateiv function in hphp/runtime/ext/mcrypt/extmcrypt.cpp in Facebook HipHop Virtual Machine HHVM before 3.3.0 does not seed the random number generator, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging the use of a single...
PT-2014-4650
Name of the Vulnerable Software and Affected Versions OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules affected versions not specified Description The issue concerns the key generation mechanism, which relies solely on a time value for entropy. This makes it easier for remote...
PT-2014-3401
Name of the Vulnerable Software and Affected Versions Apache Harmony versions through 6.0M3 Android versions prior to 4.4 Description The issue concerns the SecureRandom implementation, specifically the engineNextBytes function in the SHA1PRNG SecureRandomImpl class. When no seed is provided, it...
PT-2013-1808 · Apache · Apache Cxf
Name of the Vulnerable Software and Affected Versions: Apache CXF versions 2.5.x through 2.5.9 Apache CXF versions 2.6.x through 2.6.6 Apache CXF versions 2.7.x through 2.7.3 Description: The issue allows remote attackers to force the use of weaker cryptographic algorithms than intended, making i...
Слабая криптография в IP-телефонах Aastra
Configuration file encryption is vulnerable to replay attacks...
python keyring weak cryptography
Insecure cipher initializaton...
Ubuntu Update for python-keyring USN-1634-1
Ubuntu Update for Linux kernel vulnerabilities USN-1634-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16341.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for python-keyring USN-1634-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...
Ubuntu 11.10 / 12.04 LTS / 12.10 : python-keyring vulnerabilities (USN-1634-1)
Dwayne Litzenberger discovered that Python Keyring's CryptedFileKeyring file format used weak cryptography. A local attacker may use this issue to brute-force CryptedFileKeyring keyring files. This issue only affected Ubuntu 11.10 and Ubuntu 12.04 LTS. CVE-2012-4571 It was discovered that Python...
USN-1634-1: Python Keyring vulnerabilities
Dwayne Litzenberger discovered that Python Keyring's CryptedFileKeyring file format used weak cryptography. A local attacker may use this issue to brute-force CryptedFileKeyring keyring files. This issue only affected Ubuntu 11.10 and Ubuntu 12.04 LTS. CVE-2012-4571 It was discovered that Python...
PostgreSQL security vulnerabilities
DoS, weak crypt implementation...
RuggedCom Weak Cryptography for Password Vulnerability
Overview --------- Begin Update A Part 1 of 2 -------- This is an update to the original advisory titled ICSA-12-146-01—RuggedCom Weak Cryptography for Password Vulnerability that was published May 25, 2012, on the ICS-CERT Web page. Independent researcher Justin W. Clarke identified a default...
Oracle Application Server Multiple Vulnerabilities
The remote host is running Oracle Application Server. It was not possible to determine its version, so the version of Oracle Application Server installed on the remote host could potentially be affected by multiple vulnerabilities : - CVE-2000-0169: Remote command execution in the web listener...
Nova weak cryptography
It's possible to computer EC2SECRETKEY with known EC2ACCESSKEY...
PCI DSS Compliance : Insecure Communication Has Been Detected
Applications that fail to adequately encrypt network traffic using strong cryptography are at increased risk of being compromised and exposing cardholder data. An attacker who is able to exploit weak cryptographic processes can gain control of an application or even gain cleartext access to...