5572 matches found
CLSA-2025-1744291208 Update of nss
Fix ecc DER wrapping...
The vulnerability of the Python RSA cryptographic library, which stems from the use of cryptographic algorithms with defects, allows a perpetrator to gain access to confidential data.
The vulnerability of the Python RSA cryptographic library is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...
The vulnerability of the crypto/xilinx/zynqmp-aes-gcm.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the crypto/xilinx/zynqmp-aes-gcm.c component in the Linux operating system is related to incorrect locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
openssl: SSL_select_next_proto buffer overread
A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...
libgcrypt: vulnerable to Marvin Attack
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...
CVE-2025-1805
CVE-2025-1805 affects Crypt::Salt for Perl 0.01, where an insecure rand() is used to generate cryptographic salts. The issue’s impact is described as partial in the assessment (base CVSS 5.3, MEDIUM). Exploitation details are not provided in the sources. Remediation is not specified; several entr...
Malicious code in cryptographymethods (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2024-12797)
Summary IBM Security SOAR uses an older version of the Python cryptography/openssl library which has a known vulnerability. An update has been released which address this issue. It is recommended upgrading to Version 51.0.5.1 or later of IBM Security SOAR. Vulnerability Details CVEID:CVE-2024-127...
CVE-2024-31896
IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
PT-2025-12815 · Ibm · Ibm Spss Statistics
Name of the Vulnerable Software and Affected Versions: IBM SPSS Statistics versions 26.0 through 29.0.2 Description: The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For versions 26...
CryptoLib 安全漏洞
CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib version 1.3.3 and earlier, which stems from a heap overflow in the CryptoTMProcessSecurity function when...
CLSA-2025-1742806909 kernel: Fix of 37 CVEs
HID: core: zero-initialize the report buffer CVE-2024-50302 - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - bus: mhi: host: Add alignment check for event ring read pointer CVE-2023-52494 - net: sched: fix ets qdisc OOB Indexing CVE-2025-21692 - parport: Proper fix for...
CLSA-2025-1742723010 openssl: Fix of CVE-2024-2408
CVE-2024-2408: introduce implicit rejection mechanism for RSA PKCS1 v1.5...
NCSC Releases Post-Quantum Cryptography Timeline
The UK's National Computer Security Center part of GCHQ released a timeline--also see their blog post--for migration to quantum-computer-resistant cryptography. It even made The Guardian...
USN-7363-1 pam-pkcs11 vulnerabilities
Marcus Rückert and Matthias Gerstner discovered that PAM-PKCS11 did not properly handle certain return codes when authentication was not possible. An attacker could possibly use this issue to bypass authentication. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. CVE-2025-24531 It was...
RLSA-2025:1330 Important: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected CVE-2024-12797 For more...
openssl security update
An update is available for openssl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...
thunderbird: Downloading of OpenPGP keys from WKD used incorrect padding
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: When requesting an OpenPGP key from a WKD server, an incorrect padding size was used, and a network observer could have learned the length of the requested email address...
