Lucene search
+L

26169 matches found

CNNVD
CNNVD
added 2026/03/04 12:0 a.m.12 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.1 contained security vulnerabilities, which were due to insufficient PDF encryption and password encoding. These vulnerabilities cou...

9.8CVSS6AI score0.0031EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/04 12:0 a.m.15 views

2N Access Commander 安全漏洞

2N Access Commander is an access control solution provided by 2N Corporation. Versions of 2N Access Commander prior to 3.4.2 contained security vulnerabilities. These vulnerabilities were due to improper validation of API endpoints, which could allow bypassing password policies that rely on backu...

7.2CVSS5.8AI score0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.16 views

PT-2026-22941

Name of the Vulnerable Software and Affected Versions Wi-Fi affected versions not specified Description A security issue exists in how Wi-Fi handles wireless encryption during transmissions. An attacker can create specially crafted, authenticated transmissions that appear to come from a trusted...

5.4CVSS5.8AI score0.00084EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/04 12:0 a.m.14 views

HPE Aruba Networking Wireless Operating System 安全漏洞

HPE Aruba Networking Wireless Operating System is a wireless network operating system developed by the American company HPE. There are security vulnerabilities in the HPE Aruba Networking Wireless Operating System. These vulnerabilities stem from improper handling of wireless encryption, which ma...

5.4CVSS5.8AI score0.00084EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.13 views

PT-2026-22932

Name of the Vulnerable Software and Affected Versions 2N Access Commander versions prior to 3.4.3 Description A flaw exists in the validation of an API endpoint in 2N Access Commander that could allow an attacker to bypass the password policy for backup file encryption. Successful exploitation...

7.2CVSS5.9AI score0.00189EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.53 views

PT-2026-22887

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.1 Description The SEPPmail Secure Email Gateway does not properly handle PDF encryption passwords, potentially allowing for operating system command execution. The issue arises from...

9.8CVSS5.9AI score0.0031EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/03/04 12:0 a.m.4 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005521 advisory. In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipcaeadencryptdone Syzbot reported a slab-use-after-fr...

8.8CVSS6.7AI score0.00458EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/03 11:15 p.m.7 views

DEBIAN-CVE-2026-27932

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS5.4AI score0.00432EPSS
SaveExploits2References1
NVD
NVD
added 2026/03/03 11:15 p.m.18 views

CVE-2026-27932

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS0.00432EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
added 2026/03/03 11:15 p.m.9 views

CVE-2026-27932

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS5.9AI score0.00432EPSS
SaveExploits2References3
OSV
OSV
added 2026/03/03 11:15 p.m.10 views

UBUNTU-CVE-2026-27932

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS5.8AI score0.00432EPSS
SaveExploits2References4
EUVD
EUVD
added 2026/03/03 10:48 p.m.15 views

EUVD-2026-9344

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS6AI score0.00432EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2026/03/03 10:48 p.m.41 views

CVE-2026-27932 joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS0.00432EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2026/03/03 10:48 p.m.6 views

CVE-2026-27932 joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS6AI score0.00432EPSS
SaveExploits2References2
OSV
OSV
added 2026/03/03 10:48 p.m.7 views

CVE-2026-27932 joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2026/03/03 10:48 p.m.40 views

CVE-2026-27932

CVE-2026-27932 affects the Python library joserfc (1.6.2 and earlier). The root cause is an unbounded PBES2 Count (p2c) value read from a JWE protected header, which allows an attacker to trigger CPU exhaustion and Denial of Service by forcing extremely high PBKDF2 iteration counts. Impact is at ...

7.5CVSS6AI score0.00432EPSS
SaveExploits2References2Affected Software1
Debian CVE
Debian CVE
added 2026/03/03 10:48 p.m.30 views

CVE-2026-27932

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS5.4AI score0.00432EPSS
SaveExploits2
ATTACKERKB
ATTACKERKB
added 2026/03/03 10:48 p.m.7 views

CVE-2026-27932

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In 1.6.2 and earlier, a resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library...

7.5CVSS6AI score0.00432EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2026/03/03 8:16 p.m.9 views

CVE-2024-55023

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information...

5.3CVSS5.8AI score0.00174EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/03 8:16 p.m.19 views

CVE-2024-55023

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information...

5.3CVSS0.00174EPSS
SaveExploits0References2
Rows per page
Query Builder