4774 matches found
V-Zug Combi-Steam MSLQ Authorization Issue Vulnerability (CNVD-2019-42365)
The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...
Multiple NETGEAR Products Licensing Issues Vulnerabilities
The NETGEAR AC1450, among others, is a wireless router from NETGEAR. An authorization issue vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...
The vulnerability of the CMSdecrypt and PKCS7decrypt functions (cms_env.c, cms_smime.c, and pk7_doit.c) in the OpenSSL library, related to deficiencies in the secret data encryption mechanism, allows attackers to gain unauthorized access to protected information.
The vulnerability of the CMSdecrypt and PKCS7decrypt functions cmsenv.c, cmssmime.c, and pk7doit.c in the OpenSSL library is related to deficiencies in the encryption mechanism for confidential data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...
The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.
The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to remotely gain access, enabling them to modify, add, or delete...
The vulnerability of the Portal sub-component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.
The vulnerability of the Portal subcomponent of the Oracle PeopleSoft Enterprise PeopleTools business application suite relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access...
The vulnerability in the Networking component of Java SE and Java SE Embedded software platforms allows a attacker to cause a service failure.
The vulnerability of the Networking component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures using various network protocols...
The vulnerability of the Outside In Filters component within the software development kit (SDK) of Outside In Technology allows a malicious individual to gain unauthorized access to read, modify, add, or delete data, or to cause a service failure.
The vulnerability of the Outside component in the software development toolset SDK related to Outside in Technology is linked to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data...
The vulnerability of the Outside In Filters component within the software development kit (SDK) of Outside In Technology allows a malicious individual to gain unauthorized access to read, modify, add, or delete data, or to cause a service failure.
The vulnerability of the Outside component in the software development toolset SDK related to Outside in Technology is linked to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to cause downtime or service failures.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures using the MySQL protocol...
CVE-2019-16208
Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...
CVE-2019-16208
Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...
GHSA-RC75-CF5C-MXVH Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml
The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml...
Kernel: page cache side channel attacks
A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...
CVE-2013-2257
Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...
Design/Logic Flaw
Cryptocat before 2.0.22: Cryptocat.random Function Array Key has Entropy Weakness...
Design/Logic Flaw
Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...
CVE-2013-2260
CVE-2013-2260 concerns Cryptocat before 2.0.22, with an entropy weakness in the Cryptocat.random() Function Array Key. The connected documents consistently describe this entropy weakness; explicit exploitation details or mitigations are not provided in the sources.
CVE-2013-2260
Cryptocat before 2.0.22: Cryptocat.random Function Array Key has Entropy Weakness...