Lucene search
K

10 matches found

EUVD
EUVD
added 2026/05/04 12:39 a.m.1 views

EUVD-2026-26862

An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...

9.3CVSS5.8AI score0.00047EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-0810

Malware in sbrugna...

7.5CVSS6.4AI score0.01171EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 4:46 p.m.4 views

CVE-2020-6966

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

10CVSS7.8AI score0.00163EPSS
Exploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.22 views

ArGoSoft FTP Server 1.2.2 .2 Weak Password Encryption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3029/info ArGoSoft FTP server is an FTP server for the Windows platform. A design error exists in ArGoSoft FTP which enables an authenticated user to view other users encrypted passwords. However due to a weak encryption...

7.1AI score
Exploits0
NVD
NVD
added 2005/05/02 4:0 a.m.10 views

CVE-2005-0809

NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme fixed byte reordering to protect the key, which allows remote attackers to obtain the key via a brute force attack...

7.5CVSS6.6AI score0.01171EPSS
Exploits0References3
CVE
CVE
added 2005/03/20 5:0 a.m.50 views

CVE-2005-0809

CVE-2005-0809 affects NotifyLink server: when client key retrieval is enabled, an unauthenticated HTTP POST to /hwp/get.asp can disclose AES keys. The server uses a fixed byte reordering scheme to obfuscate the key, substantially weakening cryptographic protection and enabling brute-force recover...

7.5CVSS6.6AI score0.01171EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2005/03/20 5:0 a.m.15 views

CVE-2005-0809

NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme fixed byte reordering to protect the key, which allows remote attackers to obtain the key via a brute force attack...

6.6AI score0.01171EPSS
Exploits0References3
exploitpack
exploitpack
added 2003/03/21 12:0 a.m.18 views

ProtWare HTML Guardian 6.x - Encryption

ProtWare HTML Guardian 6.x - Encryption source: https://www.securityfocus.com/bid/7169/info A weakness has been reported in the encryption scheme used by ProtWare HTML Guardian. Specifically, the encryption scheme implemented obfuscates data using a simple bit shifting technique, making it trivia...

Exploits0
Exploit DB
Exploit DB
added 2002/06/05 12:0 a.m.41 views

Telindus 1100 Series Router - Administration Password Leak

// source: https://www.securityfocus.com/bid/4946/info The 1100 series routers are a broadband connectivity solution distributed by Telindus. Under some circumstances, a vulnerable Telindus router may leak sensitive information. When an attempt to connect to the router is made using the...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2000/11/18 12:0 a.m.20 views

NetcPlus SmartServer3 3.75 - Weak Encryption

NetcPlus SmartServer3 3.75 - Weak Encryption / source: https://www.securityfocus.com/bid/1962/info SmartServer3 is an email server designed for small networks. A design error exists in SmartServer3 which enables an authenticated user to view other users login information and possibly gain access ...

7.4AI score
Exploits0
Rows per page
Query Builder