CVE-2021-20379

IBM Guardium Data Encryption GDE 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195711...

CVE-2021-20415

IBM Guardium Data Encryption GDE 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196217...

CVE-2021-32519

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager...

Design/Logic Flaw

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager...

Weak Password Vulnerability in Bohua NetDragon Information Security All-in-One Computer

Ltd. is a high-tech enterprise mainly engaged in software product development, information security product development, and computer system integration and information security services as a whole. A weak password vulnerability exists in Bohua NetDragon Information Security All-in-One Computer,...

Ltd. T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera with Weak Password Vulnerability

Ltd. is China's leading R&D and manufacturer of intelligent terminal equipment for intelligent parking. Shenzhen Qianhai Huaxia Zhixin Data Technology Co., Ltd T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera has a weak password vulnerability, which can be...

Ruby 加密问题漏洞

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the individual developer, Yukihiro Matsumoto. Ruby suffers from a cryptographic issue vulnerability that arises from a networked system or product that does not properly use the relevant cryptographic algorithm...

Weak Password Vulnerability in Hikvision Backup Management Server

Hikvision is a provider of video-centric intelligent IoT solutions and big data services. A weak password vulnerability exists in Hikvision's backup management server, which can be exploited by attackers to obtain sensitive information...

IBM Security Guardium Data Encryption加密问题漏洞

IBM Security Guardium Data Encryption is a software for securing sensitive data within organizations from IBM, U.S.A. A security vulnerability exists in IBM Security Guardium Data Encryption, which stems from the use of weaker than expected encryption algorithms for data encryption, which could b...

CVE-2021-20379

IBM Guardium Data Encryption GDE 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195711...

Weak Password Vulnerability in Intelligent Building Integrated Management Platform of Qingdao Neusoft Carrier Intelligent Electronics Co.

Qingdao Neusoft Carrier Intelligent Electronics Co., Ltd. is a high-tech enterprise integrating R&D, production, office and life. Qingdao Neusoft Carrier Intelligent Electronics Co., Ltd. intelligent building integrated management platform has a weak password vulnerability, which can be exploited...

Weak password vulnerability in IVMS-8201E-NCG at Hangzhou Hikvision Digital Technology Co.

IVMS-8201E-NCG is a telecom-grade networking gateway device integrating signaling gateway service, media gateway service, security authentication, rights management, log management and network management functions, which can realize cascading and interconnection between video surveillance platfor...

Weak Password Vulnerability in Dynamic Ring Monitoring System of Shijiazhuang Hejia Technology Co.

Shijiazhuang Hejia Technology Co., Ltd. is a high-tech enterprise specializing in the development and application of computer room environment and power equipment monitoring system products. Shijiazhuang Hejia Technology Co., Ltd. dynamic ring monitoring system has a weak password vulnerability,...

Weak Password Vulnerability in MTS Transcoding Server of Suzhou Kodak Technology Co.

Ltd. is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to solve the visual communication and management challenges. A weak...

Weak Password Vulnerability in DCFW-1800 Series Next-Generation Firewall of Digital China Cloud Computing

DCFW-1800 series next-generation firewalls identify thousands of network applications and provide detailed application risk analysis and flexible policy control. Weak password vulnerability exists in DCFW-1800 series next-generation firewalls, where attackers utilize weak passwords to log into th...

Weak Password Vulnerability in TP-LINK Video Surveillance Management and Storage All-in-One Computer from P&L Technology Ltd.

hereinafter referred to as "TP-LINK" is a supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK video surveillance management and storage all-in-one computer, which can be exploited by an attacker to log in to the backend and obtain sensitive information...

Weak Password Vulnerability in Media Server of Zhejiang YUV Technology Co.

Zhejiang YUVE Technology Co., Ltd. is a provider of AIoT products, solutions and full-stack capabilities. A weak password vulnerability exists in the media server of Zhejiang YUV Technology Co. Ltd. that allows an attacker to log in to the backend using a weak password to obtain sensitive...

in beestat/app

✍️ Description The random number generator implemented by mtrand cannot withstand a cryptographic attack. In this case the function that generates weak random numbers is mtrand in user.php at line 58. 🕵️‍♂️ Proof of Concept Vulnerable Code / Create an anonymous user so we can log in and have access...

Weak password vulnerability in Tenda's enterprise routers

hereinafter referred to as "Tengda" is a professional supplier of network communication equipment and solutions, as well as research and development, production, supply, sales and service in one of the high-tech enterprises. A weak password vulnerability exists in Tengda's enterprise router, whic...

ZyXEL ZyWALL USG 授权问题漏洞

Zyxel ZyXEL ZyWALL USG is a network security firewall appliance from Taiwan, China-based Hopkins Zyxel. The ZyXEL ZyWALL USG suffers from an authorization issue vulnerability that originates from a lack of authentication measures or insufficient authentication strength in a network system or...