Lucene search
+L

937 matches found

Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•36 views

PT-2026-52387

Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys...

8.4CVSS5.8AI score0.00251EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/24 11:53 a.m.•49 views

CVE-2026-56237 Capgo - Unauthenticated API Key Generation via Client-Side Parameter Manipulation

Capgo before 12.128.2 contains a broken authentication vulnerability in its API key generation mechanism. API keys are exposed in frontend requests, and the backend fails to validate that keys are securely generated and bound to the authenticated user. An attacker can tamper with the API key...

9.3CVSS0.00517EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/24 11:53 a.m.•11 views

CVE-2026-56237 Capgo - Unauthenticated API Key Generation via Client-Side Parameter Manipulation

Capgo before 12.128.2 contains a broken authentication vulnerability in its API key generation mechanism. API keys are exposed in frontend requests, and the backend fails to validate that keys are securely generated and bound to the authenticated user. An attacker can tamper with the API key...

9.3CVSS6AI score0.00517EPSS
SaveExploits0References2
Mageia
Mageia
•added 2026/06/24 5:41 a.m.•26 views

Updated opensc packages fix security vulnerabilities

These packages fix security vulnerabilities: CVE-2026-10275, A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is...

7.8CVSS5AI score0.00296EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/24 12:00 a.m.•25 views

PT-2026-51768

Capgo before 12.128.2 contains a broken authentication vulnerability in its API key generation mechanism. API keys are exposed in frontend requests, and the backend fails to validate that keys are securely generated and bound to the authenticated user. An attacker can tamper with the API key...

9.3CVSS6AI score0.00517EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/24 12:00 a.m.•4 views

CVE-2026-56237: Improper Authentication

Capgo before 12.128.2 contains a broken authentication vulnerability in its API key generation mechanism. API keys are exposed in frontend requests, and the backend fails to validate that keys are securely generated and bound to the authenticated user. An attacker can tamper with the API key...

9.3CVSS6AI score0.00517EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•33 views

PT-2026-54533

Уязвимость программного обеспечения управления аккаунтами JetBrains Hub связана с ошибками в коде генератора псевдослучайных чисел при генерации ключей хоста. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить полный контроль над приложением...

10CVSS5.8AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/06/17 12:05 p.m.•16 views

kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

7.8CVSS6.3AI score0.00138EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/06/06 12:00 a.m.•30 views

RHEL 10 : java-21-ibm-semeru-certified-jdk (RHSA-2026:22328)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:22328 advisory. The IBM Semeru Runtime Certified Edition 21 runtime environment. Security Fixes: freetype: Information disclosure or denial of service via...

8.7CVSS6.4AI score0.0118EPSS
SaveExploits1References18
RedhatCVE
RedhatCVE
•added 2026/06/05 7:15 p.m.•25 views

CVE-2026-28747

A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed...

7.3CVSS5.4AI score0.00277EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/06/05 8:02 a.m.•20 views

OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow

...

5.1CVSS5.9AI score0.00296EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/05 12:00 a.m.•52 views

PT-2026-46946

Name of the Vulnerable Software and Affected Versions onnx onnx-mlir versions prior to 0.5.0.0 Description The Placeholder Node Cache Handler component contains an issue within the generate hash key function located in the src/Runtime/python/torch onnxmlir/src/torch onnxmlir/backend.py file. This...

3.6CVSS4.7AI score0.00078EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
•added 2026/06/01 5:56 p.m.•71 views

openjdk: Enhance key generation (Oracle CPU 2026-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0....

2.9CVSS5.7AI score0.00146EPSS
SaveExploits0References5
OSV
OSV
•added 2026/06/01 5:16 p.m.•10 views

AZL-89376 CVE-2026-10275 affecting package opensc for versions less than 0.27.1-2

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

5.1CVSS4.9AI score0.00296EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/01 5:16 p.m.•24 views

UBUNTU-CVE-2026-10275

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

5CVSS4.9AI score0.00296EPSS
SaveExploits0References11
EUVD
EUVD
•added 2026/06/01 4:45 p.m.•26 views

EUVD-2026-33680

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

5.1CVSS4.9AI score0.00296EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/06/01 4:45 p.m.•18 views

CVE-2026-10275 OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

5.1CVSS4.9AI score0.00296EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/06/01 4:45 p.m.•58 views

CVE-2026-10275 OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

5.1CVSS0.00296EPSS
SaveExploits0References9
CVE
CVE
•added 2026/06/01 4:45 p.m.•100 views

CVE-2026-10275

OpenSC up to 0.26.1 contains a vulnerability in the pkcs11-tool component, specifically in the function test_kpgen_certwrite of src/tools/pkcs11-tool.c, which leads to a buffer overflow. This issue can be exploited remotely; CVSS-like context indicates network access with high attack complexity a...

5.1CVSS4.9AI score0.00296EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2026/06/01 4:45 p.m.•63 views

CVE-2026-10275

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

5.1CVSS4.9AI score0.00296EPSS
SaveExploits0
Rows per page
Query Builder