Weak Password Vulnerability in Wheaton eDigital Socks5 VPN Login System

Shenzhen Wheaton Information Technology Co., Ltd Wheaton for short is a company dedicated to providing government, enterprises and institutions with remote application centralized access solutions, VPN security interconnection solutions, core data security protection solutions and so on. Weak...

Weak password vulnerability in Fusion Router K1 version

Shanghai Fusion Data Communication Technology Co., Ltd. is a technologically innovative company that provides users with intelligent products and cloud services in the field of smart home. A weak password vulnerability exists in the K1 version of Fusion Router. Attackers can utilize the...

CVE-2008-3280

It was found that various OpenID Providers OPs had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator CVE-2008-0166. In combination with the DNS Cache Poisoning issue CVE-2008-1447 and the fact that almost all SSL/TLS implementations do not...

Design/Logic Flaw

It was found that various OpenID Providers OPs had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator CVE-2008-0166. In combination with the DNS Cache Poisoning issue CVE-2008-1447 and the fact that almost all SSL/TLS implementations do not...

CVE-2008-3280

It was found that various OpenID Providers OPs had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator CVE-2008-0166. In combination with the DNS Cache Poisoning issue CVE-2008-1447 and the fact that almost all SSL/TLS implementations do not...

IBM Security Guardium 加密问题漏洞

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A weak cryptographic algorithm vulnerability exists in IBM Security...

Weak Password Vulnerability in TL-WPA7510 of P&L Technologies Ltd.

The TL-WPA7510 is a router device from P&L Technologies. A weak password vulnerability exists in the P&L Technologies TL-WPA7510, which can be exploited by an attacker to obtain sensitive information...

OpenSSL 安全特征问题漏洞

Openssl is an open source capable of implementing the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols as a general purpose cryptographic library by the Openssl team. The product supports a variety of encryption algorithms , including symmetric ciphers , hash algorithms ,...

Weak Password Vulnerability in Next-Generation Firewall Control System of Beijing Zhongke NetWizard Information Technology Co.

Ltd. is the predecessor of the Chinese Academy of Sciences in 1996 established the "Network Security Studio", is China's earlier engaged in the development of independently controllable network security products and technology enterprises. A weak password vulnerability exists in the control syste...

Cisco Firepower Management Center Information Disclosure (cisco-sa-fmc-infodisc-RJdktM6f)

The version of Cisco Firepower Management Center installed on the remote host is prior to 6.7.0. It is, therefore, affected by a vulnerability as referenced in the cisco-sa-fmc-infodisc-RJdktM6f advisory. Specifically, a vulnerability in the storage of proxy server credentials of Cisco Firepower...

Weak password vulnerability in W5 SOAR

W5 SOAR is a security orchestration and automated response platform developed on Python. W5 SOAR suffers from a weak password vulnerability. An attacker can utilize the weak password to log into the backend and obtain sensitive information...

Weak Password Vulnerability in Wayos Intelligent Routing Management System

Ltd., abbreviated as WayOS, is a supplier of network solutions and smart home solutions, as well as an emerging high-tech company integrating R&D, production and sales. Our products mainly involve routing, switching, wireless AP, firewall, optical module, monitoring, OLT, OTT in network...

Weak Password Vulnerability in China Mobile's Enterprise Gateway

China Mobile Enterprise Gateway is a gateway management software that allows you to set up wifi settings, view detailed status and more. China Mobile Enterprise Gateway suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-20419

IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280...

CVE-2020-18220

Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks...

CVE-2020-18220

Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks...

Design/Logic Flaw

Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks...

CVE-2020-18220

Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks...

CVE-2020-18220

DoraCMS v2.1.1 and earlier uses AES-CBC without a random salt/IV for password encryption, exposing passwords to dictionary attacks. The issue is documented across multiple sources (CVE-2020-18220) and indicates weak encoding rather than a broader vulnerability. Affected component is the password-...

CVE-2021-27457

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...