PT-2019-2124

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers versions prior to 1.4.2.22 Description A vulnerability in the web-based management interface of the affected routers could allow an unauthenticated, remote attacker to access...

PT-2019-5808

Name of the Vulnerable Software and Affected Versions HID Global DigitalPersona U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver version 5.0.0.5 Description The issue is related to errors in cryptographic transformations in the driver, which results in weak encryption of a user'...

IBM InfoSphere Streams Information Disclosure Vulnerability

IBM Streams is a suite of real-time data analytics solutions from IBM in the United States. The product extracts, filters, analyzes and correlates large streams of continuous data and provides data analytics. A security vulnerability exists in IBM InfoSphere Streams version 4.2.1 that stems from...

Code injection

An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using reversible encryption rather than as a hash value, and the used Vigenere algorithm is badly outdated. Moreover, the encryption key is static and too short. Due to this, the passwords stored by the applicatio...

CVE-2019-5723

CVE-2019-5723 affects Portier Vision 4.4.4.2 and 4.4.4.6. The issue is cryptographic: passwords are stored with reversible encryption using an outdated Vigenère algorithm, and the encryption key is static and too short, enabling easy decryption of stored passwords. This impacts confidentiality (h...

CMSWing Weak Encryption Algorithm Vulnerability

CMSWing is a powerful e-commerce platform and CMS builder based on ThinkJS PC, mobile and WeChat public platform. A weak encryption algorithm vulnerability exists in the global.encryptPassword function of bootstrap/global.js in CMSWing 1.3.7, which can be exploited by an attacker to brute-force...

CVE-2018-1751: Inadequate Encryption Strength

IBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 148512...

CVE-2019-3907

Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method MD5 hash of a salt and password...

Default credentials

Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method MD5 hash of a salt and password...

CVE-2019-3907

Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method MD5 hash of a salt and password...

CVE-2019-3907

CVE-2019-3907 affects IDenticard PremiSys (3.1.190). The vulnerability arises from storing user credentials and sensitive data with a weak encryption method (MD5 with salt + password). Exploitation could lead to exposure of credentials and related data, contributing to broader access risks. The I...

PT-2019-16762

Name of the Vulnerable Software and Affected Versions Premisys Identicard version 3.1.190 Description The issue concerns the storage of user credentials and other sensitive information using a known weak encryption method, specifically an MD5 hash of a salt and password. Recommendations For...

CVE-2019-3907: Use of Hard-coded Credentials

Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method MD5 hash of a salt and password...

PT-2018-3886 · D Link · D-Link 825L +1

Name of the Vulnerable Software and Affected Versions: D-Link myDlink Baby App version 2.04.06 D-Link 825L firmware 1.08 Description: The issue concerns the communication between the myDlink Baby App and the D-Link 825L Wi-Fi camera, where credentials, including username and password, are sent in...

IBM DataPower Gateways Weak Encryption Algorithm Vulnerability

IBM DataPower Gateways is a suite of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interfaces APIs, web, service-oriented architecture SOA, B2B, and cloud workloads that protects, integrates, and optimizes access across channels...

CVE-2018-1814: Inadequate Encryption Strength

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 150018...

Unspecified Vulnerability in Philips HealthSuite Health Android App

Philips HealthSuite Health Android App is an Android-based application from Philips Netherlands for controlling and managing Philips wearable health devices. A security vulnerability exists in the Philips HealthSuite Health Android App that stems from the application's use of simpler encryption. ...

Information disclosure

Philips HealthSuite Health Android App, all versions. The software uses simple encryption that is not strong enough for the level of protection required...

CVE-2018-19001

CVE-2018-19001 affects the Philips HealthSuite Health Android App (all versions) due to inadequate encryption strength (CWE-326). The root cause is the use of simple encryption not strong enough for the required protection level, impacting confidentiality and integrity when physical access is ava...

PT-2018-14758

Name of the Vulnerable Software and Affected Versions Philips HealthSuite Health Android App, all versions. Description The software uses simple encryption that is not strong enough for the level of protection required. Recommendations For all versions, consider using alternative, stronger...