IBM Security Directory Server Weak Encryption Algorithm Security Vulnerability

IBM Security Directory Server is a key component of enterprise-class directory infrastructure and unified identity management. IBM Security Directory Server version 6.4.0 uses a weak encryption algorithm and has a security vulnerability in its implementation that could be exploited by an attacker...

CVE-2011-3629

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

Information disclosure

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

CVE-2011-3629

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

CVE-2011-3629

Joomla! core 1.7.1 is affected by CVE-2011-3629, which enables information disclosure due to weak encryption. The linked records (NVD/RH, Nessus 113944, CNVD, etc.) consistently describe a vulnerability in Joomla! affecting 1.7.1 that exposes sensitive information through weak cryptographic pract...

CVE-2011-3629: Inadequate Encryption Strength

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

PT-2020-7128

Name of the Vulnerable Software and Affected Versions Joomla! core version 1.7.1 Description The issue allows information disclosure due to weak encryption. Recommendations For Joomla! core version 1.7.1, update to a version that uses stronger encryption to prevent information disclosure...

Weak Encryption Standards

opencast-kernel is vulnerable to weak encryption standards. It uses a broken hashing standard, MD5, to hash sensitive information, such as passwords, for its cookies...

CVE-2020-6966

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

CVE-2020-6966

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

Remote code execution

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

CVE-2020-6966

CVE-2020-6966 concerns GE Healthcare CARESCAPE/CIC/CSCS/ApexPro telemetry systems that use a weak encryption scheme for remote desktop control, enabling remote code execution on affected devices. The GE GEHC advisory (ICSMA-20-023-01) lists affected products: ApexPro Telemetry Server (4.2 and pri...

CVE-2020-6966

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

Weak Encryption Standards

parsel uses weak encryption standards. The configuration exists through the use of a default, hardcoded, Initialization Vector IV and causes the cipher to be vulnerable to chosen plaintext attacks...

PT-2020-19314

Name of the Vulnerable Software and Affected Versions ApexPro Telemetry Server versions 4.2 and prior CARESCAPE Telemetry Server versions 4.2 and prior Clinical Information Center CIC versions 4.X and 5.X CARESCAPE Central Station CSCS versions 1.X Description The affected products use a weak...

CVE-2020-6966: Inadequate Encryption Strength

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

GitHub Security Lab: CodeQL query to detect weak (duplicated) encryption keys for ASP.NET Telerik Upload

This bug was reported directly to GitHub Security Lab...

CVE-2020-6857

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary...

PT-2020-19269

Name of the Vulnerable Software and Affected Versions CarbonFTP version 1.4 Description The issue concerns the use of insecure proprietary password encryption in CarbonFTP. Specifically, the software uses a hard-coded weak encryption key for local FTP server passwords, which is embedded directly ...

Huawei Honor Magic 2 Information Disclosure Vulnerability (CNVD-2020-02176)

Huawei Honor Magic 2 is a smartphone from Chinese company Huawei Huawei. Huawei Honor Magic2 10.0.0.175 C00E59R2P11 and prior versions suffer from an information disclosure vulnerability that stems from the program's use of weak encryption tools. The vulnerability can be exploited by an attacker ...