CVE-2024-5275

CVE-2024-5275 involves a hard-coded password in the FileCatalyst TransferAgent that can unlock the keystore and expose contents such as private keys, enabling potential MiTM on affected users. Affected products and versions: FileCatalyst Direct 3.8.10 Build 138 and earlier, and FileCatalyst Workf...

Cilium leaks sensitive information in cilium-bugtool

Impact The output of cilium-bugtool can contain sensitive data when the tool is run with the --envoy-dump flag set against Cilium deployments with the Envoy proxy enabled. Users of the following features are affected: - TLS inspection - Ingress with TLS termination - Gateway API with TLS...

python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

A flaw was discovered in python-cryptography. A NULL pointer dereference can be triggered when a PKCS12 key and certificate do not match. Specifically, if the pkcs12.serializekeyandcertificates function is called with a non-matching certificate and private key and an encryption algorithm with...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

AZL-51964 CVE-2022-4968 affecting package netplan for versions less than 0.95-3

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

UBUNTU-CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

CVE-2022-4968 affects netplan: it leaks the WireGuard private key to local users. Affected versions are prior to 1.0; versions after 1.0 are not affected. Ubuntu advisory USN-6851-1 and vendor advisories indicate a patch is available (e.g., netplan.io 0.104-0ubuntu2~20.04.5). Several Nessus/NVD e...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

netplan Security Vulnerabilities

netplan is a utility program from the netplan team for easy network configuration on Linux systems. A security vulnerability exists in Netplan 1.0 and earlier versions, which stems from disclosing the private key of wireguard to local users...

OpenSSL 0.9.6 < 0.9.6j Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 0.9.6j. It is, therefore, affected by multiple vulnerabilities as referenced in the 0.9.6j advisory. - The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA...

santuario: Private Key disclosure in debug-log output

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to...

GHSA-HVH4-5QR6-3V7R Observable Timing Discrepancy in pypqc

Impact kyber512, kyber768, and kyber1024 on Mac OS \or when compiled with clang\ only: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the private key. Proof-of-concept exploit exists for a...

SUSE CVE-2021-26322

Persistent platform private key may not be protected with a random IV leading to a potential "two time pad attack"...

RHEL 8 : golang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: Command-line arguments may overwrite global data CVE-2021-38297 - In archive/zip in Go before...

Deserialization of Untrusted Data affecting org.apache.sshd:sshd-common package (CVE-2022-45047)

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD = 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys ...

PT-2024-10335 · Openssl +2 · Openssl +2

Name of the Vulnerable Software and Affected Versions: Easy-RSA versions 3.0.5 through 3.1.7 Description: The issue is related to a weak encryption algorithm used in Easy-RSA, specifically the cipher:des-ede3-cbc algorithm, which allows a local attacker to more easily bruteforce the private CA ke...