Lucene search
+L

15821 matches found

CNNVD
CNNVD
added 2024/01/02 12:00 a.m.9 views

MediaTek Chip Security Breach

MediaTek chips are a variety of MediaTek chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from the wlan driver using insufficiently randomized values, which may result in PIN cracking...

5.5CVSS6.8AI score0.00177EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/01/02 12:00 a.m.10 views

HuiRan Host Reseller System Authorization Issues Vulnerability

HuiRan Host Reseller System is a host reseller system from HuiRan. An authorization issue vulnerability exists in HuiRan Host Reseller System version 2.0.0 and prior versions, which stems from the file /user/index/findpass?do=4 that can lead to weak password recovery...

8.1CVSS6.8AI score0.00606EPSS
SaveExploits0References4
Rosalinux
Rosalinux
added 2023/12/26 11:51 a.m.48 views

Advisory ROSA-SA-2023-2316

Software: libgcrypt 1.8.5 OS: ROSA Virtualization 2.1 packageevrstring: libgcrypt-1.8.5-7.rv3.src.rpm CVE-ID: CVE-2021-40528 BDU-ID: 2022-00593 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Libgcrypt cryptographic library is related to the use of a weak cryptographic algorithm. Exploitation ...

5.9CVSS6.7AI score0.01423EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:00 a.m.13 views

The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

6.4CVSS6.4AI score0.00566EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:00 a.m.11 views

The vulnerability of the JoltTransform component in the Apache NiFi data processing platform allows attackers to execute cross-site scripting attacks.

The vulnerability of the JoltTransform component in the Apache NiFi data processing platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

7.9CVSS6.2AI score0.01212EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:00 a.m.12 views

The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

6.4CVSS5.9AI score0.00604EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:00 a.m.15 views

The vulnerability of the universal monitoring system Zabbix, related to weak encryption, allows attackers to gain access to confidential data.

The vulnerability of the Zabbix universal monitoring system relates to the hashing of passwords using the MD5 algorithm. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

7.8CVSS7.1AI score0.01211EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:00 a.m.18 views

The components of the Zabbix monitoring system are vulnerable. This universal monitoring system allows attackers to access confidential data and compromise its integrity.

The vulnerability of various components of the Zabbix monitoring system’s universal architecture is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

5.5CVSS5.9AI score0.00556EPSS
SaveExploits0References9Affected Software4
NVD
NVD
added 2023/12/23 9:15 a.m.27 views

CVE-2023-5962

A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization...

6.5CVSS0.00278EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/23 9:15 a.m.12 views

CVE-2023-5962

A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization...

6.5CVSS5.7AI score0.00278EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/23 9:15 a.m.19 views

Authorization

A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization...

4CVSS7AI score0.00278EPSS
SaveExploits0References1Affected Software10
Positive Technologies
Positive Technologies
added 2023/12/23 12:00 a.m.16 views

PT-2023-8045 · Moxa · Iologik E1200 Series

Name of the Vulnerable Software and Affected Versions: ioLogik E1200 Series firmware versions v3.3 and prior Description: A weak cryptographic algorithm vulnerability has been identified, which can help an attacker compromise the confidentiality of sensitive data and may lead to unexpected...

6.8CVSS7.3AI score0.00278EPSS
SaveExploits0References10
Veracode
Veracode
added 2023/12/22 5:25 a.m.25 views

Weak Cryptography

blinksocks is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the usage of weak encryption algorithms and fixed initialization vectors IV within /presets/ssr-auth-chain.js. This issue can be exploited by an attacker to disclose sensitive encrypted information via brute...

7.5CVSS6.2AI score0.00274EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/12/22 2:15 a.m.7 views

CVE-2023-7053

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/signup.php. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an atta...

8.8CVSS4.4AI score0.00786EPSS
SaveExploits1References3
NVD
NVD
added 2023/12/22 2:15 a.m.37 views

CVE-2023-7053

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/signup.php. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an atta...

8.8CVSS0.00786EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/12/22 1:31 a.m.53 views

CVE-2023-7053 PHPGurukul Online Notes Sharing System signup.php weak password

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/signup.php. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an atta...

3.1CVSS9AI score0.00786EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/12/22 12:00 a.m.16 views

PT-2023-32854 · Unknown · Phpgurukul Online Notes Sharing System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Notes Sharing System version 1.0 Description: A vulnerability was found in the PHPGurukul Online Notes Sharing System, affecting unknown code of the file /user/signup.php. This issue leads to weak password requirements. The...

8.8CVSS4.7AI score0.00786EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/12/22 12:00 a.m.12 views

PHPGurukul Online Notes Sharing System Security Vulnerability

PHPGurukul Online Notes Sharing System is an online notes sharing system from PHPGurukul Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Online Notes Sharing System, which stems from certain issues with /user/signup.php that could result in a weak password requirement...

8.8CVSS7AI score0.00786EPSS
SaveExploits1References4
OSV
OSV
added 2023/12/21 12:30 p.m.47 views

GHSA-PQJ5-37XF-X5GC blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS5.9AI score0.00274EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/12/21 12:30 p.m.35 views

blinksocks has weak encryption algorithms

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...

7.5CVSS6.7AI score0.00274EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder