Lucene search
+L

1512 matches found

Github Security Blog
Github Security Blog
added 2026/02/25 7:17 p.m.35 views

CIRCL has an incorrect calculation in secp384r1 CombinedMult

The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3...

9.8CVSS5.4AI score0.00397EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2026/02/25 4:23 p.m.20 views

CVE-2026-27846

Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network to gain access to sensitive information, including the password for admin access to the web interface and the Wi-Fi passwords.This issue affects...

6.2CVSS0.00138EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/25 2:16 p.m.21 views

CVE-2026-28195

In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations...

4.3CVSS0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/25 12:57 p.m.32 views

CVE-2026-28195

In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations...

4.3CVSS0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/25 12:00 a.m.21 views

Plane 代码问题漏洞

Plane is an open-source, self-hosted project planning tool developed by Plane OpenSource. Versions of Plane prior to 1.2.2 contained code vulnerabilities. These vulnerabilities stemmed from a flaw in the link addition function, which allowed for a full read server-side request forgeing...

7.7CVSS6AI score0.00213EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/24 8:16 a.m.22 views

CVE-2026-1229

The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3...

9.8CVSS0.00397EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 8:16 a.m.16 views

UBUNTU-CVE-2026-1229

The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3...

9.8CVSS5.8AI score0.00397EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2026/02/24 7:58 a.m.27 views

CVE-2026-1229

The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3...

9.8CVSS5.3AI score0.00397EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/02/24 7:58 a.m.8 views

CVE-2026-1229 Incorrect calculation in CIRCL secp384r1 CombinedMult

The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3...

6.3CVSS6.7AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2026/02/24 7:58 a.m.55 views

CVE-2026-1229

The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3...

9.8CVSS7.8AI score0.00397EPSS
SaveExploits0
CVE
CVE
added 2026/02/24 7:58 a.m.115 views

CVE-2026-1229

The CVE-2026-1229 issue concerns the CIRCL library’s secp384r1 implementation (CIRCL ecc/p384) where CombinedMult could yield an incorrect value for specific inputs. The root cause is fixed by using complete addition formulas in the library. Affected operations include ECDH and ECDSA signing on t...

9.8CVSS5.3AI score0.00397EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/24 7:58 a.m.37 views

CVE-2026-1229 Incorrect calculation in CIRCL secp384r1 CombinedMult

The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3...

6.3CVSS0.00397EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/02/24 12:00 a.m.12 views

CVE-2026-1229

The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3...

9.8CVSS7.2AI score0.00397EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/02/22 1:28 a.m.13 views

CVE-2019-25437

Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...

6.7CVSS6AI score0.00141EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/20 11:16 p.m.17 views

CVE-2019-25437

Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...

6.7CVSS0.00141EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/20 10:54 p.m.36 views

CVE-2019-25437 Foscam Video Management System 1.1.6.6 Buffer Overflow Denial of Service

Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...

6.7CVSS0.00141EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/20 10:54 p.m.27 views

CVE-2019-25437

CVE-2019-25437 affects Foscam Video Management System 1.1.6.6. A buffer overflow in the UID field can crash the application via a 5000-character UID input during device addition, triggered when the Login Check function runs. The issue is locally exploitable with low attack complexity and no privi...

6.7CVSS6AI score0.00141EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/20 10:54 p.m.8 views

CVE-2019-25437 Foscam Video Management System 1.1.6.6 Buffer Overflow Denial of Service

Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...

6.7CVSS5.8AI score0.00141EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.18 views

PT-2026-21314

Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an...

6.7CVSS6AI score0.00141EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/18 8:32 p.m.5 views

CVE-2026-2668 Rongzhitong Visual Integrated Command and Dispatch Platform User add access control

A vulnerability was found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This affects an unknown function of the file /dm/dispatch/user/add of the component User Handler. The manipulation results in improper access controls. The attack may be launched remotely. The...

7.5CVSS5.2AI score0.00487EPSS
SaveExploits1References4
Rows per page
Query Builder