14758 matches found
WSO2 Cryptographic Signature
The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services is related to errors in verifying cryptographic signatures. Exploiting this vulnerability can allow an attacker to gain unauthorized access and control over user accounts...
CVE-2026-42784
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...
CVE-2025-36591
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-73177
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without...
EUVD-2026-80067
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...
EUVD-2026-80012
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...
EUVD-2026-80010
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...
CVE-2026-15638
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...
CVE-2026-92718: Improper Verification of Cryptographic Signature
Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums. Attackers can replace verified templates with unsigned malicious content and restore the original modification time to bypass signature checks and execute arbitrary...
CVE-2026-81326: Use of Hard-coded Cryptographic Key
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...
CVE-2025-36591: Use of a Broken or Risky Cryptographic Algorithm
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-42784: Improper Verification of Cryptographic Signature
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...
CVE-2026-15638 Cryptographic Padding Oracle
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...
CVE-2026-15638 Cryptographic Padding Oracle
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed...
CVE-2026-15638
Delinea Secret Server is affected by a cryptographic padding oracle vulnerability (CVE-2026-15638). An unauthenticated user with network access to the server can leverage the oracle to decrypt or encrypt data using one of the server's cryptographic keys; however, the key itself is not directly ex...
CVE-2026-81855
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...
CVE-2026-78225
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...
CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...
CVE-2026-81855
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard , a marine engine management platform. An attacker with network access and no prior privileges can exploit this to gain high confidentiality and high integrity...