الباحثون
رجوع
Chris Czub
باحث من
Duo Security
#20496
من 60,401
15.2
إجمالي CVSS
الثغرات
·
2
متوسطة
1
عالية
1
PT-2017-12741
2017-09-01
5.9
CVE-2017-12871
Simplesamlphp
Simplesamlphp
The issue makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging the use of the first 16 bytes of the `secret key` as the initialization vector (IV) in the `aesEncrypt` method.
PT-2016-5769
2016-06-03
9.3
CVE-2016-3944
Lenovo
Lenovo Accelerator Application
The issue allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from the `susapi.lenovomm.com` API endpoint. This is due to a flaw in the UpdateAgent component.