CVE-2011-3629

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

Information disclosure

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

CVE-2011-3629

Joomla! core 1.7.1 is affected by CVE-2011-3629, which enables information disclosure due to weak encryption. The linked records (NVD/RH, Nessus 113944, CNVD, etc.) consistently describe a vulnerability in Joomla! affecting 1.7.1 that exposes sensitive information through weak cryptographic pract...

CVE-2011-3629

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

Weak Encryption Standards

opencast-kernel is vulnerable to weak encryption standards. It uses a broken hashing standard, MD5, to hash sensitive information, such as passwords, for its cookies...

CVE-2020-6966

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

CVE-2020-6966

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

Remote code execution

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

CVE-2020-6966

CVE-2020-6966 concerns GE Healthcare CARESCAPE/CIC/CSCS/ApexPro telemetry systems that use a weak encryption scheme for remote desktop control, enabling remote code execution on affected devices. The GE GEHC advisory (ICSMA-20-023-01) lists affected products: ApexPro Telemetry Server (4.2 and pri...

CVE-2020-6966

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

Weak Encryption Standards

parsel uses weak encryption standards. The configuration exists through the use of a default, hardcoded, Initialization Vector IV and causes the cipher to be vulnerable to chosen plaintext attacks...

GitHub Security Lab: CodeQL query to detect weak (duplicated) encryption keys for ASP.NET Telerik Upload

This bug was reported directly to GitHub Security Lab...

CVE-2020-6857

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary...

Huawei Honor Magic 2 Information Disclosure Vulnerability (CNVD-2020-02176)

Huawei Honor Magic 2 is a smartphone from Chinese company Huawei Huawei. Huawei Honor Magic2 10.0.0.175 C00E59R2P11 and prior versions suffer from an information disclosure vulnerability that stems from the program's use of weak encryption tools. The vulnerability can be exploited by an attacker ...

CVE-2020-1826

Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175C00E59R2P11 have an information leak vulnerability. Due to a module using weak encryption tool, an attacker with the root permission may exploit the vulnerability to obtain some information...

CVE-2020-1826

Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175C00E59R2P11 have an information leak vulnerability. Due to a module using weak encryption tool, an attacker with the root permission may exploit the vulnerability to obtain some information...

Information disclosure

Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175C00E59R2P11 have an information leak vulnerability. Due to a module using weak encryption tool, an attacker with the root permission may exploit the vulnerability to obtain some information...

CVE-2020-1826

Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175C00E59R2P11 have an information leak vulnerability. Due to a module using weak encryption tool, an attacker with the root permission may exploit the vulnerability to obtain some information...

CVE-2019-18263

An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity 718132 with wireless option shipped between 2016-August 2018, Veradius Unity 718132 with ViewForum option shipped between 2016-August 2018, Pulsera 718095 and Endura 718075 with wireless option shipp...

Information disclosure

An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity 718132 with wireless option shipped between 2016-August 2018, Veradius Unity 718132 with ViewForum option shipped between 2016-August 2018, Pulsera 718095 and Endura 718075 with wireless option shipp...