Lucene search
+L

15768 matches found

RedhatCVE
RedhatCVE
added 2025/03/07 2:18 a.m.13 views

CVE-2025-27663

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...

9.8CVSS7.1AI score0.00374EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/07 12:00 a.m.50 views

IBM Cognos Controller Weak Password Vulnerability

IBM Cognos Controller is a corporate performance management CPM software for financial consolidation, reporting and analysis. A weak password vulnerability exists in IBM Cognos Controller versions 11.0.0 through 11.1.0, which stems from the fact that the system does not require users to set stron...

6.5CVSS6.9AI score0.00267EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/03/07 12:00 a.m.11 views

PT-2025-10459 · Unknown +1 · Hoteldruid +1

Name of the Vulnerable Software and Affected Versions: HotelDruid versions 3.0.7 and earlier Description: The issue allows users to set weak passwords due to the lack of enforcement of password strength policies. Recommendations: For HotelDruid versions 3.0.7 and earlier, consider implementing a...

7.1CVSS6.4AI score0.00626EPSS
SaveExploits2References17
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/06 2:12 p.m.18 views

Security Bulletin: IBM Concert Software Standard Edition is vulnerable to login brute force attack

Summary IBM Concert Software Standard Edition is the non-OpenShift Container Platform OCP lightweight product form factor deployed to virtual machine. IBM Concert Software Standard Edition 1.0.5 is vulnerable to login brute force attack due to inadequate account lockout settings and weak password...

7.5CVSS7.4AI score0.00416EPSS
SaveExploits0Affected Software1
Amazon
Amazon
added 2025/03/06 12:00 a.m.10 views

Medium: python-crypto

Issue Overview: lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data i.e., it does not have semantic security in face of a ciphertext-only attack. The Decisional...

7.5CVSS6.6AI score0.01792EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:00 a.m.8 views

Amazon Linux 2 : python-crypto (ALASANSIBLE2-2025-012)

It is, therefore, affected by a vulnerability as referenced in the ALAS2ANSIBLE2-2025-012 advisory. lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data i.e., it does not...

7.5CVSS7.4AI score0.01792EPSS
SaveExploits1References4
CNVD
CNVD
added 2025/03/06 12:00 a.m.46 views

Weak Password Vulnerability in Kingh5stream of Beijing Asian Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of industrial automation and informatization software platform, focusing on independent research and development, marketing and service of domestic industrial software. A weak password vulnerability exists in Beijing...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/03/06 12:00 a.m.12 views

PT-2025-9879

Name of the Vulnerable Software and Affected Versions Auracast versions prior to SMR Mar-2025 Release 1 Description The issue arises from the use of insufficiently random values in Auracast, allowing adjacent attackers to access Auracast broadcasting. Recommendations For versions prior to SMR...

6.5CVSS5.4AI score0.00276EPSS
SaveExploits0References6
NVD
NVD
added 2025/03/05 10:15 p.m.13 views

CVE-2025-27508

Emissary is a P2P based data-driven workflow engine. The ChecksumCalculator class within allows for hashing and checksum generation, but it includes or defaults to algorithms that are no longer recommended for secure cryptographic use cases e.g., SHA-1, CRC32, and SSDEEP. These algorithms, while...

7.5CVSS0.00206EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/05 6:15 a.m.5 views

CVE-2025-27663

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...

9.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2025/03/05 6:15 a.m.62 views

CVE-2025-27663

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...

9.8CVSS0.00374EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.60 views

The vulnerability of the implementations of TLS and SSL protocols in the B&R Automation Runtime and B&R mapp View software for managing and controlling industrial processes allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the TLS and SSL protocol implementations in B&R Automation Runtime and B&R mapp View software for process control and management involves the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to compromis...

7.8CVSS5.5AI score0.00337EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2025/03/05 12:00 a.m.88 views

CVE-2025-27663

CVE-2025-27663 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923, due to weak password encryption/encoding (OVE-20230524-0007). The vulnerability is associated with a 3.1 CVSS v3.1 base score of 9.8 (NETWORK, NO authentication, no user...

9.8CVSS7.2AI score0.00374EPSS
SaveExploits0References1Affected Software2
Packet Storm
Packet Storm
added 2025/03/05 12:00 a.m.205 views

UniRide Vehicle Booking Management System 1.0 Insecure Settings

UniRide Vehicle Booking Management System version 1.0 suffers from an ignored default credential vulnerability. ============================================================================================================================================= | Title : UniRide Vehicle Booking Managemen...

7.4AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/03/05 12:00 a.m.10 views

CVE-2025-27663

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...

7.2AI score0.00374EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/05 12:00 a.m.66 views

CVE-2025-27663

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...

0.00374EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/04 8:00 p.m.11 views

CVE-2025-1953 vLLM AIBrix Prefix Caching hash.go random values

A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The...

2.1CVSS4.4AI score
SaveExploits0References9
Snyk
Snyk
added 2025/03/04 6:33 p.m.7 views

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force due to insufficient security measures in the authentication mechanism. An attacker can exploit this flaw to perform brute force attacks by repeatedly attempting to authenticate within a short time frame. Note: The...

9.8CVSS6.8AI score0.00867EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/03/04 3:33 p.m.16 views

CVE-2024-55907

IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation...

5.3CVSS6.5AI score0.00262EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2016-4982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creation of the key, and t...

4.7CVSS6.1AI score0.00214EPSS
SaveExploits0References2
Rows per page
Query Builder