GHSA-H8H6-7752-G28C Manifest Uses a One-Way Hash without a Salt

Summary Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt, identical passwords across multiple users will result in the same...

CVE-2024-1202

CVE-2024-1202 affects XPodas Octopod prior to v1. The vulnerability is described as Authentication Bypass by Primary Weakness, enabling unauthorized access. Affected software: XPodas Octopod (before v1); root cause details are not provided in the documents beyond the bypass claim. Remediation sta...

Apache Subversion Insecure Authentication Weakness Vulnerability

Apache Subversion is prone to an authentication weakness vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability (MAC OS X)

The host is installed with Mozilla Firefox and is prone to cache objects history enumeration weakness vulnerability. OpenVAS Vulnerability Test $Id: gbmozillafirefoxcacheobjenumweaknessvulnmacosx.nasl 7006 2017-08-25 11:51:20Z teissa $ Mozilla Firefox Cache Objects History Enumeration Weakness...

CVE-2009-0080

CVE-2009-0080 corresponds to the Windows Thread Pool ACL Weakness: a flaw in the ThreadPool isolation allows local users to elevate privileges by exploiting incorrect thread ACLs in processes that run under NetworkService or LocalService. The connected Microsoft security bulletin MS09-012 confirm...

Debian GNU/Linux XTERM (DECRQSS/comments) Weakness Vulnerability

No description provided by source. Package: xterm Version: 222-1etch2 Severity: grave Tags: security patch Justification: user security hole DECRQSS Device Control Request Status String "DCS $ q" simply echoes responds with invalid commands. For example, perl -e 'print "\eP$q\nbad-command\n\e\"'...