57 matches found
Security Bulletin: IBM Db2 Mirror for i is vulnerable to obtain sensitive information [CVE-2026-18104]
Summary IBM Db2 Mirror for i is vulnerable to obtaining sensitive information CVE-2026-18104 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18104 DESCRIPTION: IBM i could allow a local attacker to obtain sensitive information due to the use of the AES...
TP-Link-TL-WR820N-CVE-2025-14175
🔐 CVE-2025-14175 Soporte de algoritmos débiles en el servidor SSH – TP-Link TL-WR820N Descripción general Este repositorio documenta una vulnerabilidad de seguridad identificada en la implementación del servidor SSH del router TP-Link TL-WR820N v2.80. La vulnerabilidad permitía el uso de algoritm...
CVE-2026-27871
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...
CVE-2026-27871 TL280
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...
CVE-2026-27871
CVE-2026-27871 affects Johnson Controls TL280 (pre-5.63) with CWE-327: Use of a Broken or Risky Cryptographic Algorithm, enabling potential cryptanalytic access as described in the ICS advisory icsa-26-218-02. The vulnerability stems from weak cryptographic practices in TL280 prior to version 5.6...
EUVD-2026-58763
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...
CVE-2026-27871 TL280
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...
CVE-2026-27871
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...
GO-2026-5585 vulnerabilities
Vulnerabilities for packages: gatus-fips, gatus, versitygw-fips, versitygw...
PT-2026-72108
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...
CVE-2026-27871: Use of a Broken or Risky Cryptographic Algorithm
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...
Security Bulletin:Vulnerability in paramiko affects IBM Netezza Appliance
Summary The paramiko package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-44405 Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. CWE:CWE-327: Use of a Broken...
CVE-2026-48386
CVE-2026-48386 concerns Adobe ColdFusion, describing a vulnerability in the use of a broken or risky cryptographic algorithm (CWE-327) that could lead to disclosure of sensitive memory. The issue is exploitable without user interaction and is rated high by the accompanying CVSS3.1 vector (AV:N/AC...
CVE-2026-48386 ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...
CVE-2026-48386 ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...
Security Bulletin: QRadar App SDK for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Investigation Assistant App for IBM QRadar App SDK has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-25645 DESCRIPTION:...
CVE-2026-48588 vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1, authentik-fips, openstack-horizon-2026.1-fips...
EUVD-2025-208314
Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...
CVE-2025-13476: Use of a Broken or Risky Cryptographic Algorithm
Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...