Lucene search
+L

42 matches found

CVE
CVE
•added 2026/10/14 10:01 a.m.•15 views

CVE-2026-109971

A flaw exists in the clevis PKCS#11 pin where the clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-line argument to pkcs11-tool . This exposure allows any local user to view the sensitive PIN via process listing or the /proc filesystem. No specific remediation or exploit inf...

4.7CVSS5.7AI score0.00126EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/14 10:01 a.m.•8 views

CVE-2026-109971 Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool

A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem...

4.7CVSS5.7AI score0.00126EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/14 10:01 a.m.•42 views

CVE-2026-109971 Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool

A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem...

4.7CVSS0.00126EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2026-109971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it...

4.7CVSS5.6AI score0.00126EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•16 views

Rocky Linux 9.6 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1787393949)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787393949 advisory. - A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with...

5.1CVSS5.7AI score0.00321EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•11 views

AlmaLinux 9.6 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1787393949)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787393949 advisory. - A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with...

5.1CVSS5.7AI score0.00321EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•22 views

AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2026:1788866231)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788866231 advisory. - A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the...

5.1CVSS4.8AI score0.00296EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•18 views

TencentOS Server 4: opensc (TSSA-2026:0853)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0853 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

5.1CVSS4.8AI score0.00296EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/16 12:00 a.m.•23 views

Amazon Linux 2023 : opensc (ALAS2023-2026-1898)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1898 advisory. A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation caus...

5.1CVSS4.8AI score0.00296EPSS
SaveExploits0References4
Amazon
Amazon
•added 2026/07/08 12:00 a.m.•36 views

Medium: opensc

Issue Overview: A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The...

5.1CVSS4.7AI score0.00296EPSS
SaveExploits0
Amazon
Amazon
•added 2026/07/07 12:00 a.m.•28 views

Medium: opensc

Issue Overview: A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The...

5.1CVSS4.7AI score0.00296EPSS
SaveExploits0
osv_mgasa
osv_mgasa
•added 2026/06/24 5:41 a.m.•35 views

MGASA-2026-0231 Updated opensc packages fix security vulnerabilities

These packages fix security vulnerabilities: CVE-2026-10275, A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is...

7.8CVSS4.9AI score0.00296EPSS
SaveExploits0References4
Mageia
Mageia
•added 2026/06/24 5:41 a.m.•31 views

Updated opensc packages fix security vulnerabilities

These packages fix security vulnerabilities: CVE-2026-10275, A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is...

7.8CVSS4.7AI score0.00296EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/16 1:13 p.m.•21 views

CVE-2026-10275

A flaw was found in OpenSC, specifically within the pkcs11-tool Key Generation Module. This vulnerability, located in the testkpgencertwrite function, is a buffer overflow that can be triggered remotely. A remote attacker could exploit this flaw, potentially leading to information disclosure, dat...

5.1CVSS6AI score0.00296EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2026/06/02 1:44 a.m.•48 views

SUSE CVE-2026-10275

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

7CVSS4.7AI score0.00296EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/06/02 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-10275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key...

5.1CVSS4.8AI score0.00296EPSS
SaveExploits0References4
NVD
NVD
•added 2026/06/01 5:16 p.m.•37 views

CVE-2026-10275

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

5.1CVSS0.00296EPSS
SaveExploits0References9
osv_azl
osv_azl
•added 2026/06/01 5:16 p.m.•14 views

AZL-89376 CVE-2026-10275 affecting package opensc for versions less than 0.27.1-2

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

5.1CVSS4.7AI score0.00296EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/06/01 5:16 p.m.•20 views

DEBIAN-CVE-2026-10275

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

2.3CVSS4.7AI score0.00296EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/06/01 5:16 p.m.•16 views

CVE-2026-10275

A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an atta...

5.1CVSS4.8AI score0.00296EPSS
SaveExploits0References10
Rows per page
Query Builder