Lucene search
+L

2007 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•4 views

CVE-2024-25102: Inadequate Encryption Strength

This vulnerability exists in AppSamvid software due to the usage of a weaker cryptographic algorithm hash SHA1 in user login component. An attacker with local administrative privileges could exploit this to obtain the password of AppSamvid on the targeted system. Successful exploitation of this...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•5 views

CVE-2024-1224: Inadequate Encryption Strength

This vulnerability exists in USB Pratirodh due to the usage of a weaker cryptographic algorithm hash SHA1 in user login component. A local attacker with administrative privileges could exploit this vulnerability to obtain the password of USB Pratirodh on the targeted system. Successful exploitati...

7.1CVSS5.9AI score0.0012EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/04 12:00 a.m.•14 views

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An information disclosure vulnerability exists in Dell PowerScale OneFS that arises from the inclusion of the use of corrupt or risky encryption algorithms. An...

9.1CVSS6.2AI score0.00281EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/03 12:00 a.m.•17 views

IBM MQ 加密问题漏洞

IBM MQ Operator is a tool from International Business Machines IBM for managing the lifecycle of IBM MQ Queue Manager. IBM MQ Operator suffers from a cryptographic issue vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker t...

7.5CVSS6.5AI score0.00261EPSS
SaveExploits0References3
OSV
OSV
•added 2024/03/01 11:15 a.m.•13 views

CVE-2024-22458

Dell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext...

5.3CVSS5.8AI score0.00132EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/22 12:00 a.m.•22 views

B&R Industrial Automation Studio Security Breach

B&R Industrial Automation Studio is a suite of integrated development environments IDEs from B&R Industrial Automation, an Austrian company that develops and programs its automation solutions. A security vulnerability exists in B&R Industrial Automation Studio versions prior to 4.6, BR Technology...

8.3CVSS7.5AI score0.00364EPSS
SaveExploits0References2
CNVD
CNVD
•added 2024/02/22 12:00 a.m.•70 views

IBM PowerSC Encryption Problem Vulnerability (CNVD-2024-09945)

IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. IBM PowerSC has an encryption issue vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt highly...

7.5CVSS6.5AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/12 12:00 a.m.•19 views

IBM CICS TX Standard 加密问题漏洞

IBM CICS TX Standardand Advanced is a comprehensive, single transaction runtime package from International Business Machines IBM, Inc. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Standard and Advanced has a cryptographic issue vulnerability that stems...

7.5CVSS6.6AI score0.00486EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/02/10 12:00 a.m.•11 views

IBM Semeru Runtime Encryption Issue Vulnerability

IBM Semeru Runtime is a Java Runtime Environment JRE from International Business Machines IBM. IBM Semeru Runtime suffers from a cryptographic issue vulnerability that stems from the use of weaker-than-expected encryption algorithms that could allow an attacker to decrypt highly sensitive...

7.5CVSS6.5AI score0.00323EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/02/02 12:00 a.m.•17 views

IBM PowerSC 加密问题漏洞

IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. IBM PowerSC has an encryption issue vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt highly...

7.5CVSS6.6AI score0.00318EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/01/31 12:00 a.m.•33 views

The vulnerability of the microprogrammed software of Emerson Rosemount X-STREAM flow analyzers allows a intruder to disclose protected information.

The vulnerability of Microprogrammed Software in Emerson Rosemount X-STREAM flow analyzers is related to insufficient encryption reliability. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

7.8CVSS7.2AI score0.00452EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/12/26 12:00 a.m.•19 views

The vulnerability of the universal monitoring system Zabbix, related to weak encryption, allows attackers to gain access to confidential data.

The vulnerability of the Zabbix universal monitoring system relates to the hashing of passwords using the MD5 algorithm. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

7.8CVSS7.1AI score0.01087EPSS
SaveExploits0References8Affected Software2
OSV
OSV
•added 2023/12/21 12:30 p.m.•53 views

GHSA-PQJ5-37XF-X5GC blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS5.9AI score0.00274EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/12/21 12:30 p.m.•38 views

blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS6.7AI score0.00274EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2023/12/21 11:15 a.m.•14 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS7.1AI score0.00274EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•20 views

blinksocks security breach

blinksocks is a blinksocks open source framework for building composable proxy stacks. A security vulnerability exists in blinksocks version 3.3.8, which stems from a vulnerability that allows remote attackers to gain access to sensitive information via a weak encryption algorithm in...

7.5CVSS6.8AI score0.00274EPSS
SaveExploits0References3
Mend
Mend
•added 2023/12/21 12:00 a.m.•1 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

8.7CVSS0.00274EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/12/21 12:00 a.m.•50 views

CVE-2023-50481

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5AI score0.00274EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•6 views

CVE-2023-50481: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS7.2AI score0.00274EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•15 views

PT-2023-31578 · Unknown · Blinksocks

Name of the Vulnerable Software and Affected Versions: blinksocks version 3.3.8 Description: An issue was discovered in the component /presets/ssr-auth-chain.js, allowing remote attackers to obtain sensitive information via weak encryption algorithms. Recommendations: For blinksocks version 3.3.8...

7.5CVSS7.2AI score0.00274EPSS
SaveExploits0References9
Rows per page
Query Builder