Researchers
Back
Chris Czub
Researcher from
Duo Security
#20398
of 60,403
15.2
Total CVSS
Vulnerabilities
·
2
Medium
1
High
1
PT-2017-12741
2017-09-01
5.9
CVE-2017-12871
Simplesamlphp
Simplesamlphp
The issue makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging the use of the first 16 bytes of the `secret key` as the initialization vector (IV) in the `aesEncrypt` method.
PT-2016-5769
2016-06-03
9.3
CVE-2016-3944
Lenovo
Lenovo Accelerator Application
The issue allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from the `susapi.lenovomm.com` API endpoint. This is due to a flaw in the UpdateAgent component.