7297 matches found
PT-2025-1985 · Algo Edge · Algo Edge
Name of the Vulnerable Software and Affected Versions: Algo Edge versions up to 2.1.1 Description: A vulnerability exists in the authentication mechanism of Algo Edge, which could allow an attacker with adjacent access to the laboratory network and the Algo Edge system to craft valid authenticati...
[SECURITY] Fedora 40 Update: rsync-3.4.0-1.fc40
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...
CVE-2024-8603
CVE-2024-8603 affects B&R Automation Runtime and B&R mapp View versions prior to 6.1, where the SSL/TLS component uses a broken or risky cryptographic algorithm. Unauthenticated network-based attackers may masquerade as services on impacted devices. Multiple sources (NVD/NCSA advisory references ...
CVE-2024-8603
A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices...
CVE-2024-51456: Use of RSA Algorithm without OAEP
IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks...
PT-2025-2900
Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation versions 21.0.0 through 21.0.7.19 IBM Robotic Process Automation versions 23.0.0 through 23.0.19 Description The issue is related to the use of the RSA algorithm without OAEP, which could allow a remote attacker ...
CVE-2024-6324 Inefficient Algorithmic Complexity in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics...
CVE-2024-6324 Inefficient Algorithmic Complexity in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics...
CVE-2024-8361
In SiWx91x devices, CVE-2024-8361 describes a DoS caused by SHA2/224 producing a 256-bit hash instead of 224 bits, triggering a software assertion. The issue is documented across multiple sources (NVD, Red Hat, CVE listing). Affected component is the SHA2/224 implementation; root cause is incorre...
CVE-2024-8361 DoS caused due to wrong hash length returned for SHA2/224 algorithm
In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits. This incorrect hash length triggers a software assertion, which subsequently causes a Denial of Service DoS. If a watchdog is implemented, device will restart after watch dog expires. If watchdog is not...
PT-2025-4294 · Unknown · Langchain4J-Aideepin
Name of the Vulnerable Software and Affected Versions: LangChain4j-AIDeepin versions prior to 3.5.0 Description: LangChain4j-AIDeepin is a Retrieval enhancement generation RAG project. Prior to version 3.5.0, it used MD5 to hash files, which may cause file upload conflicts. Recommendations: For...
Unspecified vulnerability in GNU GRUB
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that stems from grubcryptomemcmp not using a constant time algorithm, no details of the vulnerability are provided at this time...
CVE-2024-56414
Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...
CVE-2024-56414
The CVE-2024-56414 entry describes a vulnerability in Acronis Cyber Protect 16 for Windows prior to build 39169, where the web installer integrity check uses a weak hash algorithm. Affected product/version: Acronis Cyber Protect 16 (Windows) before build 39169. Impact and exploit details are not ...
CVE-2024-56414
Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...
Web installer integrity check used weak hash algorithm
...
October 12, 2021-KB5006065 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
October 12, 2021-KB5006065 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016 Applies To .NET Release Date: October 12, 2021 Version: .NET Framework 4.8 The October 12, 2021 update for Windows 10, version 1607 and Windows Server, version 2016...
PT-2026-2874
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel's crypto subsystem contains an issue where memory allocated via sock kmalloc was not zero-initialized. This affected several crypto user API contexts and requests, relyi...
Description of the security update for Microsoft Exchange Server 2019 and 2016: November 12, 2024 (KB5044062)
Description of the security update for Microsoft Exchange Server 2019 and 2016: November 12, 2024 KB5044062 Applies To Exchange Server 2019 Exchange Server 2016 Note Notice We have re-released the Exchange Server 2019 and 2016 November 12, 2024, security update SU to address the issue where...
