Lucene search
+L

3579 matches found

Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.18 views

PT-2025-53035

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the akcipher functionality, specifically in handling the setting of a private key. A missing default stub in the set priv key function could...

7.8CVSS6.2AI score0.0094EPSS
SaveExploits2References895
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.10 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk version 2.4.0p18 and earlier, which stems from the exposure of an SSH private key in the HTML source code of the rules page, which could lead to the unauthorized triggering of a predefined alert...

5.3CVSS6.5AI score0.00212EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/17 5:56 p.m.8 views

Malicious code in trondec (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d4efad56ea7992fa8744736bf9f7b5e8eee6a521109819f7b841eb3f1ea91bbc Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

6.9AI score
SaveExploits0References2
OSV
OSV
added 2025/12/17 5:56 p.m.10 views

MAL-2025-192605 Malicious code in trondec (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d4efad56ea7992fa8744736bf9f7b5e8eee6a521109819f7b841eb3f1ea91bbc Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

6.8AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/12/17 12:24 a.m.6 views

SUSE CVE-2025-68243

In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfsmatchclient If the TLS security policy is of type RPCXPRTSECTLSX509, then the certserial and privkeyserial fields need to match as well since they define the client's identity, as...

6.5AI score0.00076EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/16 3:15 p.m.24 views

CVE-2025-68243

In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfsmatchclient If the TLS security policy is of type RPCXPRTSECTLSX509, then the certserial and privkeyserial fields need to match as well since they define the client's identity, as...

7CVSS0.00076EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/16 2:21 p.m.37 views

CVE-2025-68243

CVE-2025-68243 addresses a Linux kernel NFS TLS verification issue. When the TLS policy is RPC_XPRTSEC_TLS_X509, the cert_serial and privkey_serial fields must match because they define the client’s identity as presented to the server; a mismatch could undermine identity binding in TLS/X509 confi...

7CVSS6.1AI score0.00076EPSS
SaveExploits0References2
Debian
Debian
added 2025/12/16 12:25 a.m.21 views

[SECURITY] [DLA 4409-1] paramiko security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4409-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès December 16, 2025 https://wiki.debian.org/LTS -...

5.9CVSS6.7AI score0.0208EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.15 views

PT-2025-51656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the NFS implementation. Specifically, when the TLS security policy is set to RPC XPRTSEC TLS X509, the nfs match client function does not proper...

5.4AI score0.00677EPSS
SaveExploits5References386
Tenable Nessus
Tenable Nessus
added 2025/12/16 12:00 a.m.7 views

Debian dla-4409 : paramiko-doc - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4409 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4409-1 [email protected] https://www.debian.org/lts/security/...

5.9CVSS6.5AI score0.0208EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/12/12 3:11 p.m.10 views

CVE-2024-40593

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

6CVSS6.7AI score0.00107EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/12 12:00 a.m.17 views

PT-2026-2255

Name of the Vulnerable Software and Affected Versions RustCrypto Signatures versions prior to 0.1.0-rc.2 Description RustCrypto Signatures provides support for digital signatures, which authenticate data using public-key cryptography. A timing side-channel was identified in the Decompose algorith...

6.4CVSS6.5AI score0.00181EPSS
SaveExploits0References17
OSV
OSV
added 2025/12/11 3:15 p.m.10 views

CVE-2024-40593

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

4.4CVSS5.8AI score0.00107EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/11 3:15 p.m.18 views

CVE-2024-40593

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

6CVSS0.00107EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/11 2:10 p.m.21 views

EUVD-2024-55320

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

6CVSS6.2AI score0.00107EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/11 2:10 p.m.50 views

CVE-2024-40593

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

6CVSS0.00107EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/11 2:10 p.m.16 views

CVE-2024-40593

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

6CVSS6.3AI score0.00107EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/11 2:10 p.m.65 views

CVE-2024-40593

CVE-2024-40593 affects Fortinet FortiAnalyzer, FortiManager, FortiOS and FortiPortal products across multiple versions (notably FortiAnalyzer 6.4, 7.0, 7.2.x, 7.4.x; FortiManager 6.4, 7.0, 7.2.x, 7.4.x; FortiOS 7.x; FortiPortal 6.0). The vulnerability is a key management error that may allow an a...

6CVSS6.3AI score0.00107EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/11 12:00 a.m.18 views

PT-2025-50607

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

6CVSS6.7AI score0.00107EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.10 views

Fortinet多款产品 加密问题漏洞

Fortinet FortiOS and others are products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiManager is a centralized network security management platform.Fortinet FortiAnalyzer is a centralized network security...

6CVSS6.4AI score0.00107EPSS
SaveExploits0References2
Rows per page
Query Builder