Lucene search
+L

689 matches found

NCSC
NCSC
added 2022/03/10 12:0 a.m.8 views

Vulnerability fixed in PAN-OS

A vulnerability has been fixed in PAN-OS. The vulnerability with reference CVE-2022-0022 allows a malicious person with access to the system's password hashes, to crack the hashes to crack and thus gain access to the passwords. This vulnerability arose because PAN-OS uses a weak cryptographic...

4.6CVSS6.8AI score0.00125EPSS
SaveExploits0
Veracode
Veracode
added 2022/02/21 8:32 a.m.19 views

Weak Cryptography

github.com/gravitl/netmaker is vulnerable to weak cryptography. The vulnerability exits in SetJWTSecret function of wts.go due to hard-coded secret key which allows an attacker to create a valid authentication token for any user and use it with admin privileges...

9.8CVSS3.4AI score0.01714EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:0 a.m.7 views

The vulnerability of the IPv4 protocol implementation in Linux operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the IPv4 protocol implementation in Linux operating systems is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

5.9CVSS6.5AI score0.00368EPSS
SaveExploits0References23Affected Software3
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:10 p.m.3 views

CVE-2021-38921

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210067...

7.5CVSS6AI score0.00665EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/01/10 2:10 p.m.3 views

CVE-2021-38921

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210067...

7.5CVSS6.5AI score
SaveExploits0References2
NVD
NVD
added 2021/12/26 1:15 a.m.22 views

CVE-2021-45512

Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX7000 before 1.0.1.90, R6250 before 1.0.4.42, R6400v2 before 1.0.4.98, R6700v3...

9.8CVSS0.00544EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/26 1:15 a.m.7 views

CVE-2021-45512

Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX7000 before 1.0.1.90, R6250 before 1.0.4.42, R6400v2 before 1.0.4.98, R6700v3...

9.8CVSS7.3AI score0.00544EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/26 1:15 a.m.7 views

CVE-2021-45512

Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX7000 before 1.0.1.90, R6250 before 1.0.4.42, R6400v2 before 1.0.4.98, R6700v3...

9.8CVSS5.3AI score0.00544EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/26 1:15 a.m.20 views

Code injection

Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX7000 before 1.0.1.90, R6250 before 1.0.4.42, R6400v2 before 1.0.4.98, R6700v3...

7.5CVSS9.4AI score0.00544EPSS
SaveExploits0References1Affected Software21
CVE
CVE
added 2021/12/26 1:1 a.m.61 views

CVE-2021-45512

CVE-2021-45512 concerns weak cryptography in a range of NETGEAR devices (D7000v2, D8500, EX3700/3800/6120/6130/7000, R6250/6400v2/6700v3/6900P/7000/7000P/7100LG/7900/8000/8300/8500/RS400/WNR3500Lv2/XR300) with affected firmware revisions listed by PT-2021-5851. The vulnerability enables decryptio...

9.8CVSS9.3AI score0.00544EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/26 1:1 a.m.27 views

CVE-2021-45512

Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX7000 before 1.0.1.90, R6250 before 1.0.4.42, R6400v2 before 1.0.4.98, R6700v3...

8.6CVSS9.6AI score0.00544EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/13 6:15 p.m.4 views

CVE-2021-38947

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242...

7.5CVSS5.8AI score0.00665EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/13 6:15 p.m.6 views

CVE-2021-39058

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 214617...

7.5CVSS5.8AI score0.00665EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/10 12:0 a.m.4 views

CVE-2021-38947

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242...

7.5CVSS6.6AI score0.00665EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/12/09 5:15 p.m.5 views

CVE-2021-39002

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS5.5AI score0.0089EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/12/09 5:0 p.m.17 views

CVE-2021-39002

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.9CVSS8.1AI score0.0089EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/12/08 12:0 a.m.3 views

CVE-2021-39002

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS6.8AI score0.0089EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2021/12/01 5:15 p.m.27 views

CVE-2021-20400

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074...

7.5CVSS0.00665EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/01 5:15 p.m.6 views

CVE-2021-20400

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074...

7.5CVSS6.5AI score0.00665EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.10 views

The vulnerability of the SSH protocol implementation in the Dell Isilon InsightIQ performance monitoring and reporting analytics platform allows a hacker to bypass security restrictions and gain full control over the application.

The vulnerability of the SSH protocol implementation of the analysis platform for monitoring performance and generating reports in Dell Isilon InsightIQ is related to the use of cryptographic algorithms that contain vulnerabilities and risks. Exploiting this vulnerability could allow a malicious...

8.1CVSS7.8AI score0.00834EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder