15886 matches found
CVE-2022-1252 Use of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard5
Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any...
Samsung Flow 路径遍历漏洞
Samsung flow is an application for Samsung Samsung mobile devices, a software used to connect Samsung to Win10 computers for a seamless, secure, and connected experience. path traversal vulnerability exists in versions prior to Samsung Flow 4.8.07.4, which stems from the lack of proper permission...
GNUBOARD5 加密问题漏洞
GNUBOARD5 is a PHP and MySQL based web forum system. GNUBOARD5 5.5.5 and prior versions suffer from a cryptographic issue vulnerability that stems from the application's use of weak encryption algorithms resulting in the exposure of password information. An unauthorized attacker could exploit thi...
The vulnerabilities in the components reports_admin.php, data_queries.php, data_input.php, graph_templates.php, graphs.php, reports_admin.php, and data_input.php of the Cacti network monitoring software allow a attacker to compromise the integrity of the data.
The vulnerability of the components reportsadmin.php, dataqueries.php, datainput.php, graphtemplates.php, graphs.php, reportsadmin.php, and datainput.php of the Cacti network monitoring software is related to the lack of security measures for the website structure. Exploiting this vulnerability...
PT-2022-13751 · Gnuboard5 · Gnuboard5
Name of the Vulnerable Software and Affected Versions: gnuboard/gnuboard5 versions prior to and including 5.5.5 Description: The issue concerns the use of a broken or risky cryptographic algorithm, leading to exposure of sensitive information. This allows an attacker to derive the email address o...
Backdoor.Win32.FTP.Lana.01.d Hardcoded Credential
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/ea9ab5983a6fa71e31907e74d4ddbab6.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.FTP.Lana.01.d Vulnerability: Weak Hardcoded Credentials Family: Lana Type: PE32 MD5:...
The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2021-32593
A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...
CVE-2021-32593
A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
Code injection
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
CVE-2022-26250
CVE-2022-26250 affects SynaMan v5.1 and earlier. Root cause is weak file permissions, enabling an authenticated attacker to escalate privileges. Documented impact is privilege escalation with local access; exploitation status is not detailed in the provided sources. No remediation details are inc...
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...
The vulnerability lies in the implementation of the `mt_rand()` and `time()` functions in the pearweb package’s PHP classes from the PEAR library. This allows an attacker to gain unauthorized access to protected information or execute arbitrary code.
The vulnerability in the implementation of the mtrand and time functions in the pearweb package’s PHP class library in the PEAR library is related to the use of an insufficiently secure MD5 encryption algorithm. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...
Synametrics Technologies SynaMan 安全漏洞
Synametrics Technologies SynaMan is a remote file manager from Synametrics Technologies, USA. A security vulnerability exists in Synametrics Technologies SynaMan v5.1 and below, which stems from a weak file permission in the software that can be exploited by an authenticated attacker to elevate...
CVE-2022-1236
Weak Password Requirements in GitHub repository weseek/growi prior to v5.0.0...