Lucene search
K

5770 matches found

Vulnrichment
Vulnrichment
added 2025/10/21 12:0 a.m.2 views

CVE-2025-56802

The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with local access to decrypt sensitive application data stored in %APPDATA%. A different vulnerability than CVE-2025-56801. NOTE: the Supplier's position is...

6.1AI score0.00029EPSS
Exploits2References2
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.2 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS6.8AI score0.00019EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.4 views

Amazon Linux 2 : openssl-snapsafe, --advisory ALAS2OPENSSL-SNAPSAFE-2025-008 (ALASOPENSSL-SNAPSAFE-2025-008)

The version of openssl-snapsafe installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2OPENSSL-SNAPSAFE-2025-008 advisory. Issue summary: An application trying to decrypt CMS messages encrypted usingpassword based encryption can...

7.5CVSS6.7AI score0.00041EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.12 views

Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2025-1225)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1225 advisory. Issue summary: An application trying to decrypt CMS messages encrypted usingpassword based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may...

7.5CVSS6.6AI score0.00041EPSS
Exploits0References6
NVD
NVD
added 2025/10/14 10:15 a.m.7 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS0.00019EPSS
Exploits0References1
OSV
OSV
added 2025/10/14 10:15 a.m.0 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS5.7AI score
Exploits0References1
Cvelist
Cvelist
added 2025/10/14 9:15 a.m.6 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS0.00019EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/14 9:15 a.m.4 views

EUVD-2025-34157

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS6.4AI score0.00019EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/14 9:15 a.m.2 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS6.5AI score0.00019EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.3 views

PT-2025-46654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Transport Layer Security TLS asynchronous decryption. Specifically, if the tls strp msg hold function fails to allocate a clone of the input...

5.5CVSS7.7AI score0.00029EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.1 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2025-2246)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.8AI score0.00224EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.1 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2025-2214)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.8AI score0.00224EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/11 12:0 a.m.2 views

EulerOS 2.0 SP11 : shim (EulerOS-SA-2025-2246)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in...

5.9CVSS7.9AI score0.00224EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/11 12:0 a.m.2 views

EulerOS 2.0 SP11 : shim (EulerOS-SA-2025-2214)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in ...

5.9CVSS7.9AI score0.00224EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.1 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Oct-2025 Release 1, which stems from an out-of-bounds read in the JPEG...

5.5CVSS6.4AI score0.00018EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-1273

Malware in sbrugna...

9.8CVSS9.3AI score0.00177EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-4011

Malware in sbrugna...

7.5CVSS6.9AI score0.01725EPSS
Exploits0References29
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-7356

Malware in sbrugna...

7.8CVSS7.7AI score0.00042EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-6751

Malware in sbrugna...

7.5CVSS7.8AI score0.00218EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2004-1020

Malware in sbrugna...

2.1CVSS6.4AI score0.00051EPSS
Exploits0References3
Rows per page
Query Builder