Lucene search
+L

2007 matches found

Prion
Prion
•added 2008/12/05 12:30 a.m.•25 views

Default credentials

Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password via a brute-force attack...

7.5CVSS7.1AI score0.02002EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/01 12:00 a.m.•5 views

CVE-2008-4368: Undefined Security Weakness

The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension JCE key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE...

5CVSS5.8AI score0.01386EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2008/09/24 12:00 a.m.•39 views

Gentoo Security Advisory GLSA 200603-15 (crypt-cbc)

The remote host is missing updates announced in advisory GLSA 200603-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

2.6CVSS9.2AI score0.0143EPSS
SaveExploits0
Prion
Prion
•added 2008/08/22 4:41 p.m.•23 views

Design/Logic Flaw

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

2.1CVSS6.4AI score0.00166EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2008/08/22 4:41 p.m.•16 views

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

4.4CVSS4.5AI score0.00166EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2008/08/22 4:00 p.m.•13 views

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

6.2AI score0.00166EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2008/08/22 4:00 p.m.•30 views

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

4.4AI score0.00166EPSS
SaveExploits0References5
CVE
CVE
•added 2008/08/22 4:00 p.m.•48 views

CVE-2008-3775

Folder Lock 5.9.5 and earlier is affected. The issue is the use of weak password encryption (ROT-25), which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl_pack registry value. No patch/versioned fix is specified in the provided documents. ...

4.4CVSS4.5AI score0.00166EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2008/08/22 12:00 a.m.•7 views

PT-2008-5134 · Newsoft · Folder Lock

Name of the Vulnerable Software and Affected Versions: Folder Lock versions 5.9.5 and earlier Description: The issue concerns the use of weak encryption, specifically ROT-25, for password protection. This weakness allows local administrators to access sensitive information by reading and decrypti...

4.4CVSS6.7AI score0.00166EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/08/22 12:00 a.m.•3 views

CVE-2008-3775: Use of a Broken or Risky Cryptographic Algorithm

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

4.4CVSS5.6AI score0.00166EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2008/08/13 2:17 p.m.•88 views

Low: Red Hat Security Advisory: Red Hat Network Satellite Server security update

Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. During an internal security...

9.1CVSS6AI score0.77376EPSS
SaveExploits15References12
seebug.org
seebug.org
•added 2008/07/16 12:00 a.m.•18 views

IPSwitch IMail Server <= 8.1 Local Password Decryption Utility

No description provided by source. / IpSwitch IMail Server = ver 8.1 User Password Decryption by Adik netmaniac hotmail KG IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption sche...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2008/06/16 12:00 a.m.•272 views

DUC NO-IP weak encryption

Password is stored in world-readable registry entry in reversable encryption form...

2.5AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/05/18 12:00 a.m.•6 views

CVE-2008-2299: Undefined Security Weakness

Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass...

5CVSS5.9AI score0.01069EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2008/04/17 12:00 a.m.•58 views

Cisco Network Admission Control weak encryption

Shared secret is transmitted cleartext over the networkig during logging...

10CVSS1.8AI score0.02566EPSS
SaveExploits0References1Affected Software1
exploitpack
exploitpack
•added 2008/03/21 12:00 a.m.•23 views

DotNetNuke 4.8.1 - Default ValidationKey and DecriptionKey Weak Encryption

DotNetNuke 4.8.1 - Default ValidationKey and DecriptionKey Weak Encryption source: https://www.securityfocus.com/bid/28391/info DotNetNuke is prone to a weak encryption vulnerability. An attacker can exploit this issue to decrypt sensitive data. Information obtained may lead to further attacks...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/03/21 12:00 a.m.•28 views

DotNetNuke 4.8.1 - Default 'ValidationKey' and 'DecriptionKey' Weak Encryption

source: https://www.securityfocus.com/bid/28391/info DotNetNuke is prone to a weak encryption vulnerability. An attacker can exploit this issue to decrypt sensitive data. Information obtained may lead to further attacks. This issue affects DotNetNuke 4.8.1; other versions may also be affected. //...

5.1CVSS5.8AI score0.02475EPSS
SaveExploits2
NVD
NVD
•added 2008/03/18 11:44 p.m.•26 views

CVE-2008-0995

The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF file, which makes it easier for attackers to decrypt the file via brute force methods...

2.6CVSS6AI score0.01699EPSS
SaveExploits1References9
Prion
Prion
•added 2008/03/18 11:44 p.m.•27 views

Design/Logic Flaw

Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which makes it easier for attackers to decrypt the file via brute force methods...

2.6CVSS6.5AI score0.01226EPSS
SaveExploits1References9Affected Software2
securityvulns
securityvulns
•added 2008/03/04 12:00 a.m.•39 views

Paramiko SSH server weak encryption

Weak PRNG generator is used for encryption...

4.3CVSS1.7AI score0.0162EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder