Lucene search
+L

7 matches found

Snyk
Snyk
added 2026/08/03 5:53 a.m.7 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value that leads to information exposure in the processPacket method of CCMBlockCipher, with equivalent paths in KCCMBlockCipher and KGCMBlockCipher, which decrypt directly into the caller's output...

8.7CVSS5.6AI score0.00212EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/01 12:34 a.m.18 views

EUVD-2026-40449

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.8AI score0.00229EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/30 11:17 p.m.12 views

DEBIAN-CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.8AI score0.00229EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/05/21 9:49 p.m.24 views

Insecure Randomness

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.3CVSS5.8AI score0.00229EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/neonbs – fixed an issue of out-of-bounds access due to short inputs. The bit-sliced implementation of AES-CTR operates on blocks of 128 bytes. For tail blocks or inputs that are shorter than 128 bytes, it will fall...

7.1CVSS5.7AI score0.00234EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/02/20 7:39 p.m.10 views

CVE-2026-25998

strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database private keys, EAP secrets, strongMan encrypts the corresponding database fields. So far it used AES in CTR mode with a global database key. Together with an initialization...

8.7CVSS5.7AI score0.00309EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/01/20 12:0 a.m.6 views

MediaWiki 安全特征问题漏洞

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy in-house knowledge management and content management systems.CheckUser extension is one of the user information checking extensions. A security feature issue...

5.3CVSS5.6AI score0.00389EPSS
SaveExploits1References2
Rows per page
Query Builder