CVE-2019-20775

An issue was discovered on LG mobile devices with Android OS 9.0 Qualcomm SDM450, SDM845, SM6150, and SM8150 chipsets software. Weak encryption leads to local information disclosure. The LG ID is LVE-SMP-190010 August 2019...

CVE-2020-10377

A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials...

Design/Logic Flaw

A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials...

PT-2020-12047

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Connect Client versions prior to 214.100.1214.0 Description A weak encryption issue could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system wit...

PT-2020-10750

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 9.0 Description An issue was discovered that leads to local information disclosure due to weak encryption. The affected devices are LG mobile devices with Android OS 9.0, specifically those with Qualcomm SDM45...

CVE-2020-10377: Use of a Broken or Risky Cryptographic Algorithm

A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials...

IBM Resilient Information Disclosure Vulnerability

IBM Resilient is a suite of incident response platforms from IBM in the United States. The platform supports functions such as incident response process orchestration and incident management. A security vulnerability exists in versions prior to IBM Resilient v35.2, which stems from the program's...

GnuTLS Encryption Problem Vulnerability

GnuTLS is a free secure communication library for implementing SSL, TLS and DTLS protocols. An encryption issue vulnerability exists in versions prior to GnuTLS 3.6.13. The vulnerability stems from a network system or product that does not properly use the relevant cryptographic algorithms,...

RHEL 6 / 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP2 (RHSA-2020:1337)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1337 advisory. This release adds the new Apache HTTP Server 2.4.37 Service Pack 2 packages that are part of the JBoss Core Services offering. This...

IBM Spectrum Scale Encryption Issue Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

IBM API Connect weak encryption vulnerability (CNVD-2020-17503)

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. A weak encryption vulnerability exists in IBM API Connect versions V5.0.0.0 through 5.0.8.7iFix3...

The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of web interfaces of network switches from Belden Hirschmann, series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS, is related to weak encryption. Exploiting this vulnerability can allow a remote attacker to execute a “man-in-the-middle” attack...

CVE-2019-9095

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access...

Design/Logic Flaw

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access...

CVE-2019-9095

CVE-2019-9095 affects Moxa MGate MB31xx/MB32xx/MB36xx/MB3180 gateways. The vulnerability arises from use of a broken or risky cryptographic algorithm that may allow an attacker to intercept weakly encrypted passwords and gain administrative access. Affected firmware versions include MB3170/MB3270...

The vulnerability of the SAP Marketing CRM system arises from deficiencies in the encryption of user-input data, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP Marketing CRM system exists due to deficiencies in the encryption of data entered by users. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks remotely...

Weak Encryption Algorithm Vulnerability in Multiple Moxa Products

Moxa MB3170/MB3270/MB3180/MB3280/MB3480/MB3660 series is an advanced Ethernet gateway device manufactured by moxa Taiwan. Weak encryption algorithm vulnerability in multiple Moxa products can be exploited by attackers to obtain sensitive information...

IBM QRadar Advisor With Watson App Information Disclosure Vulnerability

IBM QRadar Advisor with Watson is a suite of security threat analysis solutions from IBM USA. The product includes features such as security threat response and threat probing. A security vulnerability exists in the IBM QRadar Advisor With Watson App versions 1.1 through 2.5, which stems from the...

CVE-2019-4557: Inadequate Encryption Strength

IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 166206...

IBM Security Secret Server Encryption Issue Vulnerability

IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. An encryption issue vulnerability exists in IBM Security Secret Server. The...