Lucene search
+L

7 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/10 12:36 a.m.•12 views

CLEANSTART-2026-XK50947 Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly

Security vulnerability affects the apache-nifi package. The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly...

9.1CVSS6.5AI score0.00496EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/01 12:35 a.m.•15 views

CLEANSTART-2026-UN16903 Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly

Security vulnerability affects the apache-nifi package. The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly...

9.1CVSS6.5AI score0.00496EPSS
SaveExploits0References3
Mend
Mend
•added 2026/05/12 4:58 p.m.•8 views

CVE-2026-33117

The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may...

9.3CVSS6.6AI score0.00496EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•4 views

CVE-2026-33117: Improper Authentication

The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may...

9.1CVSS6.6AI score0.00496EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/12/19 11:09 a.m.•5 views

Malware in azure-sdk-for-java-codegen

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Spring Security Advisories
Spring Security Advisories
•added 2023/01/26 12:00 a.m.•76 views

Spring Cloud Azure 5.0 is now Generally Available

We're very pleased to announce that Spring Cloud Azure 5.0 is now generally available. This major release includes the following features, improvements, and documentation updates: Compatible with Spring Boot 3 and Spring Cloud 2022.0.0 Supports Passwordless Connections Updated Azure for Spring...

7.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/09 12:00 a.m.•7 views

CVE-2020-16971: Undefined Security Weakness

Azure SDK for Java Security Feature Bypass Vulnerability...

9.1CVSS5.7AI score0.04266EPSS
SaveExploits0References1
Rows per page
Query Builder