Lucene search
+L

306 matches found

NVD
NVD
added 2025/12/17 9:15 p.m.16 views

CVE-2025-14763

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To...

6CVSS0.00106EPSS
Exploits0References3
Snyk
Snyk
added 2025/12/17 8:38 p.m.9 views

Use of a Broken or Risky Cryptographic Algorithm

Overview Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm due to missing cryptographic key commitment when storing encrypted data keys in an instruction file. An attacker with write access to the S3 bucket can manipulate encrypted data keys to...

6CVSS6.7AI score0.00192EPSS
Exploits0References2
CVE
CVE
added 2025/12/17 8:20 p.m.20 views

CVE-2025-14764

The CVE-2025-14764 entry concerns the Amazon S3 Encryption Client for Go. The identified issue is a missing cryptographic key commitment when the encrypted data key (EDK) is stored in an Instruction File, which could allow a user with write access to the S3 bucket to introduce a rogue EDK that de...

6CVSS6.3AI score0.00097EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/17 8:20 p.m.29 views

CVE-2025-14764

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigat...

6CVSS0.00097EPSS
Exploits0References3
OSV
OSV
added 2025/12/17 8:20 p.m.9 views

CVE-2025-14764

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigat...

6CVSS6.7AI score0.00097EPSS
Exploits0References5
NVD
NVD
added 2025/12/17 8:15 p.m.8 views

CVE-2025-14759

Missing cryptographic key commitment in the Amazon S3 Encryption Client for .NET may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To...

6CVSS0.00097EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/17 8:7 p.m.2 views

CVE-2025-14759

Missing cryptographic key commitment in the Amazon S3 Encryption Client for .NET may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To...

6CVSS6.4AI score0.00097EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.17 views

PT-2025-51880

Name of the Vulnerable Software and Affected Versions Amazon S3 Encryption Client for .NET versions prior to 3.2.0 Description A flaw exists in the Amazon S3 Encryption Client for .NET where a missing cryptographic key commitment could allow a user with write access to an S3 bucket to introduce a...

6CVSS6.2AI score0.00097EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.9 views

Amazon S3 Encryption Client for .NET 安全漏洞

Amazon S3 Encryption Client for .NET is a client-side encryption library open-sourced by Amazon Web Services. A security vulnerability exists in Amazon S3 Encryption Client for .NET that stems from a lack of encryption key promises, which could cause a user with write access to an S3 storage buck...

6CVSS6.5AI score0.00097EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.9 views

PT-2025-51885

Name of the Vulnerable Software and Affected Versions Amazon S3 Encryption Client for Go versions prior to 4.0 Description A missing cryptographic key commitment in the Amazon S3 Encryption Client for Go could allow a user with write access to an S3 bucket to introduce a new EDK Encrypted Data Ke...

6CVSS6.3AI score0.00097EPSS
Exploits0References6
AlpineLinux
AlpineLinux
added 2025/11/12 6:28 p.m.10 views

CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS5.2AI score0.0044EPSS
Exploits1
Wolfi
Wolfi
added 2025/11/02 2:17 p.m.7 views

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: promxy, vitess, rootlesskit, k6, mesosphere-vsphere-csi, spqr, external-secrets-operator, cloud-provider-azure, bazelisk, cluster-proportional-autoscaler, direnv, certificate-transparency, govulncheck, nerdctl, secrets-store-csi-driver, cilium-certgen, azure-ipam,...

5.3CVSS6.4AI score0.00526EPSS
Exploits0
Veeam
Veeam
added 2025/10/23 12:0 a.m.20 views

Release Information for Veeam Backup for Microsoft 365 8.2 and Cumulative Patches

More Recent Version Available Please find the latest version of Veeam Backup for Microsoft 365 here: Veeam Downloads - Latest Version Build Numbers and Versions of Veeam Backup for Microsoft 365 Requirements This release can be used to: update manually from a previous Veeam Backup for Microsoft 3...

5.7AI score
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2012-5958

Malware in sbrugna...

5.8CVSS6AI score0.00601EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-9346

Malware in sbrugna...

6.1CVSS6.3AI score0.00923EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-12588

Malware in sbrugna...

6.1CVSS6.7AI score0.01525EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-26516

Malicious code in bioql PyPI...

4.3CVSS6.3AI score0.00288EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.13 views

EUVD-2024-26790

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00351EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-12480

Malicious code in bioql PyPI...

4.8CVSS6.4AI score0.00442EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-17416

Malicious code in bioql PyPI...

4.3CVSS4.6AI score0.00374EPSS
Exploits0References2
Rows per page
Query Builder