Lucene search
+L

2008 matches found

OSV
OSV
•added 2019/07/16 5:15 p.m.•20 views

CVE-2019-13603

An issue was discovered in the HID Global DigitalPersona formerly Crossmatch U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vector to encrypt a user's fingerprint image, resulting in weak encryption of that. This, in combinatio...

5.9CVSS6.2AI score0.01064EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/16 12:00 a.m.•7 views

CVE-2019-13603: Use of Insufficiently Random Values

An issue was discovered in the HID Global DigitalPersona formerly Crossmatch U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vector to encrypt a user's fingerprint image, resulting in weak encryption of that. This, in combinatio...

5.9CVSS5.8AI score0.01064EPSS
SaveExploits1References2
OSV
OSV
•added 2019/07/05 9:08 p.m.•49 views

GHSA-J3G9-6FX5-GJV7 Inadequate Encryption Strength in DotNetNuke

DNN aka DotNetNuke 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811...

7.5CVSS7.5AI score0.7387EPSS
SaveExploits4References6
Veracode
Veracode
•added 2019/07/04 4:08 a.m.•76 views

Information Disclosure

Dnn.Platform is vulnerable to information disclosure. The attack is due to the use of weak encryption algorithm to encrypt input parameters...

7.5CVSS7.1AI score0.76143EPSS
SaveExploits4References4Affected Software2
Veracode
Veracode
•added 2019/07/04 3:23 a.m.•54 views

Information Disclosure

Dnn.Platform is vulnerable to information disclosure. The vulnerability is due to the incomplete fix of CVE-2018-15811 where it encrypts the input parameters using a weak encryption algorithm during the installation...

7.5CVSS7.1AI score0.76143EPSS
SaveExploits5References4Affected Software2
OSV
OSV
•added 2019/07/03 5:15 p.m.•39 views

CVE-2018-18325

DNN aka DotNetNuke 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811...

7.5CVSS7.6AI score
SaveExploits0References4
NVD
NVD
•added 2019/07/03 5:15 p.m.•33 views

CVE-2018-15811

DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...

7.5CVSS7.4AI score0.76143EPSS
SaveExploits4References4
Prion
Prion
•added 2019/07/03 5:15 p.m.•42 views

Code injection

DNN aka DotNetNuke 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811...

5CVSS7.5AI score0.76143EPSS
SaveExploits5References3Affected Software1
Vulnrichment
Vulnrichment
•added 2019/07/03 4:37 p.m.•34 views

CVE-2018-18325

DNN aka DotNetNuke 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811...

7.6AI score0.7387EPSS
SaveExploits4References3
CVE
CVE
•added 2019/07/03 4:37 p.m.•1174 views

CVE-2018-18325

Summary: CVE-2018-18325 affects DNN (DotNetNuke) platforms running version 9.2 through 9.2.2. The issue is an inadequate encryption strength for input parameters, arising from an incomplete fix for CVE-2018-15811. The vulnerability is tied to the use of a weak encryption algorithm in protecting i...

7.5CVSS7.5AI score0.7387EPSS
SaveIn wildExploits4References4Affected Software1
Mend
Mend
•added 2019/07/03 4:37 p.m.•1 views

CVE-2018-18325

DNN aka DotNetNuke 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811...

8.7CVSS0.7387EPSS
SaveExploits4References6
Vulnrichment
Vulnrichment
•added 2019/07/03 4:23 p.m.•23 views

CVE-2018-15811

DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...

7.4AI score0.76143EPSS
SaveExploits4References3
Mend
Mend
•added 2019/07/03 4:23 p.m.•4 views

CVE-2018-15811

DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...

8.7CVSS0.76143EPSS
SaveExploits4References5
CVE
CVE
•added 2019/07/03 4:23 p.m.•1197 views

CVE-2018-15811

CVE-2018-15811 – DNN series (DotNetNuke) vulnerable to weak encryption . The provided sources confirm that DNN platforms running 9.2 through 9.2.2 use a weak encryption algorithm to protect input parameters (notably in cookies), representing a vulnerability in the protection of parameter data. Th...

7.5CVSS7.3AI score0.76143EPSS
SaveIn wildExploits4References4Affected Software1
Cvelist
Cvelist
•added 2019/07/03 4:23 p.m.•51 views

CVE-2018-15811

DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...

7.3AI score0.76143EPSS
SaveExploits4References3
attackerkb
attackerkb
•added 2019/07/03 12:00 a.m.•21 views

CVE-2018-15811

DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS6.7AI score0.76143EPSS
SaveIn wildExploits4References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/03 12:00 a.m.•7 views

CVE-2018-15811: Inadequate Encryption Strength

DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...

7.5CVSS5.8AI score0.76143EPSS
SaveExploits4References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/03 12:00 a.m.•4 views

CVE-2018-18325: Inadequate Encryption Strength

DNN aka DotNetNuke 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811...

7.5CVSS5.8AI score0.7387EPSS
SaveExploits4References2
attackerkb
attackerkb
•added 2019/07/03 12:00 a.m.•50 views

CVE-2018-18325

DNN aka DotNetNuke 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS7.5AI score0.76143EPSS
SaveIn wildExploits5References4
CNVD
CNVD
•added 2019/06/24 12:00 a.m.•20 views

IBM Security Access Manager Appliance Weak Encryption Algorithm Vulnerability (CNVD-2019-19294)

IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from IBM, USA. The product is mainly used for access control and Web-based threat protection, providing system performance monitoring, log analysis and diagnosis. A security vulnerability exists in...

5.9CVSS6.7AI score0.00869EPSS
SaveExploits0References1
Rows per page
Query Builder