5564 matches found
kernel-rt security update
An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...
python-cryptography security update
An update is available for python-cryptography. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programmin...
RLSA-2025:14553 Moderate: python-cryptography security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
RockyLinux 8 : python-cryptography (RLSA-2025:14553)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:14553 advisory. python-cryptography: NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Tenable has extracted the preceding description block directly from the...
UBUNTU-CVE-2025-39729
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix dereferencing uninitialized error pointer Fix below smatch warnings: drivers/crypto/ccp/sev-dev.c:1312 sevplatforminitlocked error: we previously assumed 'error' could be null...
crypto: qat - flush misc workqueue during device shutdown
...
CVE-2025-39721
CVE-2025-39721 (Linux kernel, crypto: qat) : Repeated loading/unloading of a device-specific QAT driver (e.g., qat_4xxx) can trigger a use-after-free when a power-management interrupt fires just before the core intel_qat.ko remains loaded. The shared workqueue qat_misc_wq may still host a deferre...
Malicious code in element-ui-cryptography-gravity-quito (npm)
The package element-ui-cryptography-gravity-quito was found to contain malicious code...
Malicious code in triton-gulp-stop-cryptography (npm)
The package triton-gulp-stop-cryptography was found to contain malicious code...
MAL-2025-45316 Malicious code in nightwatch-cryptography-paleoclimatology-heka (npm)
The package nightwatch-cryptography-paleoclimatology-heka was found to contain malicious code...
MAL-2025-43758 Malicious code in chakra-ui-cryptography-zenith-cassini (npm)
The package chakra-ui-cryptography-zenith-cassini was found to contain malicious code...
Malicious code in nightwatch-cryptography-paleoclimatology-heka (npm)
The package nightwatch-cryptography-paleoclimatology-heka was found to contain malicious code...
Malicious code in chakra-ui-cryptography-zenith-cassini (npm)
The package chakra-ui-cryptography-zenith-cassini was found to contain malicious code...
MAL-2025-46376 Malicious code in triton-gulp-stop-cryptography (npm)
The package triton-gulp-stop-cryptography was found to contain malicious code...
MAL-2025-44127 Malicious code in element-ui-cryptography-gravity-quito (npm)
The package element-ui-cryptography-gravity-quito was found to contain malicious code...
CVE-2025-56608
The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...
Cryptographic Application of Elliptic Curve with High Rank
Elliptic curve cryptography is better than traditional cryptography based on RSA and discrete logarithm of finite field in terms of efficiency and security. In this paper, we show how to exploit elliptic curve with high rank, which has not been used in cryptography before, to construct...
Linux Distros Unpatched Vulnerability : CVE-2024-26130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, ...
CVE-2025-9828
A vulnerability was determined in Tenda CP6 11.10.00.243. The affected element is the function sub2B7D04 of the component uhttp. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. This attack is characterized by high complexity. The exploitabili...