Lucene search
+L

13 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2019-4615

Malware in sbrugna...

6.5CVSS6.6AI score0.01033EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-20081

Malicious code in bioql PyPI...

7.8CVSS6.3AI score0.00199EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-52496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a...

7.8CVSS6.3AI score0.00199EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/07/06 12:10 a.m.•15 views

CVE-2025-52496

A flaw was found in mbedtls. A race condition exists during Advanced Encryption Standard New Instructions AES-NI detection when specific compiler optimizations are enabled. This flaw allows a local attacker to potentially extract an AES key or perform a GCM forgery within a multithreaded program...

7.8CVSS6AI score0.00199EPSS
SaveExploits1References2
NVD
NVD
•added 2025/07/04 3:15 p.m.•14 views

CVE-2025-52496

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...

7.8CVSS0.00199EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/07/04 12:00 a.m.•4 views

CVE-2025-52496

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...

7.8CVSS7AI score0.00199EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•0 views

CVE-2025-52496: Compiler Optimization Removal or Modification of Security-critical Code

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...

7.8CVSS5.7AI score0.00199EPSS
SaveExploits1References1
CVE
CVE
•added 2025/07/04 12:00 a.m.•134 views

CVE-2025-52496

CVE-2025-52496 affects Mbed TLS prior to 3.6.4. The issue is a race condition during AES-NI detection triggered by certain compiler optimizations, enabling an attacker to either extract an AES key from a multithreaded process or perform a GCM forgery. Affected component: mbedtls library AESNI det...

7.8CVSS6.4AI score0.00199EPSS
SaveExploits1References2Affected Software1
AlpineLinux
AlpineLinux
•added 2025/07/04 12:00 a.m.•28 views

CVE-2025-52496

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...

7.8CVSS6.3AI score0.00199EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/07/04 12:00 a.m.•48 views

CVE-2025-52496

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...

7.8CVSS0.00199EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/04 12:00 a.m.•10 views

CVE-2025-52496

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...

7.8CVSS6AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•11 views

PT-2025-28010

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions prior to 3.6.4 Description: The issue is related to a race condition in AESNI detection that can occur under certain compiler optimizations. This could potentially allow an attacker to extract an AES key from a multithreaded...

7.8CVSS7.1AI score0.00308EPSS
SaveExploits1References59
RedhatCVE
RedhatCVE
•added 2025/05/22 8:03 a.m.•16 views

CVE-2019-13054

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z...

6.5CVSS7.3AI score0.00849EPSS
SaveExploits1References1
Rows per page
Query Builder