2896 matches found
EUVD-2025-35218
The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with local access to decrypt sensitive application data stored in %APPDATA%. A different vulnerability than CVE-2025-56802...
CVE-2025-56802
The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with local access to decrypt sensitive application data stored in %APPDATA%. A different vulnerability than CVE-2025-56801. NOTE: the Supplier's position is...
CVE-2025-55039
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...
Apache Spark has Inadequate Encryption Strength
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature when the spark.network.crypto.enabled is true and the cipher is not explicitly configured, resulting in the use of AES in CTR mode without authentication. An attacker can compromise the...
CVE-2025-55039 Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...
Linux Distros Unpatched Vulnerability : CVE-2023-53599
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Fix missing initialisation affecting gcm-aes-s390 Fix afalgallocareq to...
Malicious code in jito-sub-aes-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 103b0ca3b2a6d09bab1b2b0a19d08540d01dfbfe07e7eba218427c25239cfbc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in aes-create-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32024f762cae5f727853e7d6e07ee5012a1b440d859182a62be6123eb638e873 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32653
Malicious code in aes-create-ipheriv npm...
EUVD-2025-32654
Malicious code in jito-sub-aes-ipheriv npm...
MAL-2025-47972 Malicious code in aes-create-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32024f762cae5f727853e7d6e07ee5012a1b440d859182a62be6123eb638e873 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47979 Malicious code in jito-sub-aes-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 103b0ca3b2a6d09bab1b2b0a19d08540d01dfbfe07e7eba218427c25239cfbc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2019-8534
Malware in sbrugna...
EUVD-2017-9053
Malware in sbrugna...
EUVD-2009-3262
Malware in sbrugna...
EUVD-2020-4212
Malware in sbrugna...
EUVD-2013-5388
Malware in sbrugna...