354 matches found
SUSE SLES15 Security Update : ovmf (SUSE-SU-2026:1413-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1413-1 advisory. This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error...
SUSE-SU-2026:21161-1 Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting bsc1252441...
CVE-2026-27856: Improper Authentication
Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port,...
CVE-2025-41351: Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud server. The thumbnail display URL allows an attacker to decrypt and encrypt the parameters used by the application to generate ‘self-signed’ access URLs...
CVE-2025-68698: Use of a Broken or Risky Cryptographic Algorithm
Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses PKCS1Encoding which is vulnerable to Bleichenbacher padding oracle attacks. Modern systems should use OAEP Optimal Asymmetric Encryption Padding. This vulnerability is fixed in 2.2...
CVE-2025-68931: Improper Authentication
Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, AES/CBC/PKCS5Padding lacks authentication, making it vulnerable to padding oracle attacks and ciphertext manipulation. This vulnerability is fixed in 2.2...
CVE-2019-12121
An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSingleSignOn UserId field, an attacker is able to decrypt arbitrary information encrypted with the same symmetric key as UserId. All Portal setups are affected...
HSEC-2025-0002 Double Public Key Signing Function Oracle Attack on Ed25519
Double Public Key Signing Function Oracle Attack on Ed25519 The standard specification of Ed25519 message signing involves providing the algorithm with a message and private key. The function will use the private key to compute the public key and sign the message. Some libraries provide a variant...
EUVD-2014-8562
Malware in sbrugna...
EUVD-2021-0898
Malware in sbrugna...
EUVD-2019-12121
Malware in sbrugna...
EUVD-2010-3983
Malware in sbrugna...
EUVD-2015-7722
Malware in sbrugna...
EUVD-2019-10120
Malware in sbrugna...
EUVD-2018-0604
Malware in sbrugna...
EUVD-2019-3772
Malware in sbrugna...
EUVD-2013-0534
Malware in sbrugna...
EUVD-2016-5379
Malware in sbrugna...