2007 matches found
eWeLink mobile application encryption issue vulnerability
IFTTT eWeLink is an IFTTT open source application. It provides remote switching of fans and lights, control of wind speed and dimming of lights. A security vulnerability exists in the eWeLink mobile application, which stems from weak encryption in fast pairing mode, and can be exploited by an...
PT-2021-9466
Name of the Vulnerable Software and Affected Versions eWeLink mobile application versions 4.9.2 and earlier Android eWeLink mobile application versions 4.9.1 and earlier iOS Description Weak encryption in the Quick Pairing mode allows physically proximate attackers to eavesdrop on Wi-Fi credentia...
CVE-2020-12702: Use of a Broken or Risky Cryptographic Algorithm
Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during th...
IBM Security Verify Information Queue Weak Encryption Algorithm Vulnerability
IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. A weak cryptographic algorithm vulnerability exists in IBM Security Verify Information Queue. An attacker could exploi...
Oclean Mobile Application Encryption Issue Vulnerability
An encryption issue vulnerability exists in Oclean Mobile Application, which arises from a network system or product that does not properly use the relevant cryptographic algorithms, resulting in content that is not properly encrypted, weakly encrypted, and sensitive information stored in plainte...
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
SolarWinds Hack Prompts Congress to Put NSA in Encryption Hot Seat
Members of Congress are demanding the U.S. National Security Agency NSA reveal what it knows about the 2015 Juniper Networks supply-chain delivery breach. In a letter sent by U.S. Senator Ron Wyden and nine additional members of Congress, the lawmakers demand a full account of the NSA-designed...
CentOS 8 : openssl (CESA-2020:1840)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1840 advisory. - openssl: side-channel weak encryption vulnerability CVE-2019-1547 - openssl: information disclosure in fork CVE-2019-1549 - openssl: information...
CVE-2020-23162
Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials...
CVE-2020-23162
Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials...
Information disclosure
Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials...
Exploit for CVE-2020-23160
Pyrescom-Termod-PoC This is the Proof-of-concept exploit code...
CVE-2020-23162
Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials...
CVE-2020-23162
CVE-2020-23162 affects Pyrescom Termod4 time management devices pre-10.04k. The issue is sensitive information disclosure due to weak encryption, allowing remote attackers to read a session-file and obtain plain-text credentials. Impact is partial confidentiality loss per CVSS2, with high impact ...
PT-2021-10848
Name of the Vulnerable Software and Affected Versions Pyrescom Termod4 versions prior to 10.04k Description The issue concerns sensitive information disclosure and weak encryption, allowing remote attackers to read a session-file and obtain plain-text user credentials. Recommendations For version...
CVE-2020-23162: Use of a Broken or Risky Cryptographic Algorithm
Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials...
PT-2021-5472
Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to the use of weak encryption algorithms in the firmware of Ethernet modules. This could allow a remote attacker to gain full access to the device with...
CVE-2019-4160: Inadequate Encryption Strength
IBM Security Guardium Data Encryption GDE 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577...
IBM Emptoris Strategic Supply Management Platform Weak Encryption Algorithm Vulnerability
The IBM Emptoris Strategic Supply Management Platform is the public portal to the Emptoris suite of products. A weak cryptographic algorithm vulnerability exists in IBM Emptoris Strategic Supply Management Platform 10.1.3. An attacker could exploit this vulnerability to decrypt highly sensitive...
