Lucene search
K

2857 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.4 views

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27061)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27061 advisory. - In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Fix use after...

7.8CVSS5.3AI score0.00017EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.7 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-38300)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38300 advisory. - In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error...

5.5CVSS5.4AI score0.0007EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.5 views

MiracleLinux 9 : openssl-3.0.7-6.el9 (AXSA:2023-5373:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5373:04 advisory. openssl: Using a Custom Cipher with NIDundef may lead to NULL encryption CVE-2022-3358 Tenable has extracted the preceding description block directly from th...

7.5CVSS5.6AI score0.19455EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:0 a.m.3 views

MiracleLinux 4 : openssl098e-0.9.8e-18.AXS4.2 (AXSA:2014-380:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-380:01 advisory. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which...

7.4CVSS7.5AI score0.89694EPSS
Exploits9References2
SUSE CVE
SUSE CVE
added 2026/01/17 12:24 a.m.1 views

SUSE CVE-2026-22863

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server...

9.2CVSS6.9AI score0.0001EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2026/01/16 11:31 p.m.3 views

CVE-2026-22863

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server...

9.2CVSS6.8AI score0.0001EPSS
Exploits1References1
EUVD
EUVD
added 2026/01/16 3:49 p.m.3 views

EUVD-2026-2936

Deno node:crypto doesn't finalize cipher...

9.2CVSS6.4AI score0.0001EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2026/01/16 3:49 p.m.8 views

Deno node:crypto doesn't finalize cipher

Summary The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server secrets. PoC js import crypto from "node:crypto"; const key = crypto.randomBytes32; const iv =...

9.2CVSS7AI score0.0001EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2026/01/16 3:49 p.m.6 views

GHSA-5379-F5HF-W38V Deno node:crypto doesn't finalize cipher

Summary The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server secrets. PoC js import crypto from "node:crypto"; const key = crypto.randomBytes32; const iv =...

9.2CVSS6.8AI score0.0001EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.7 views

MiracleLinux 7 : python-2.7.5-69.0.1.el7.AXS7 (AXSA:2018-3246:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3246:03 advisory. A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the- middle attacker could use this flaw to recover some...

7.5CVSS7.2AI score0.40993EPSS
Exploits7References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 3 : openssl097a-0.9.7a-12.AXS3.1 (AXSA:2014-382:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-382:01 advisory. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which...

7.4CVSS7.5AI score0.89694EPSS
Exploits9References2
NVD
NVD
added 2026/01/15 11:15 p.m.4 views

CVE-2026-22863

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server...

9.2CVSS0.0001EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/01/15 10:53 p.m.23 views

CVE-2026-22863 Deno node:crypto doesn't finalize cipher

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server...

9.2CVSS0.0001EPSS
Exploits1References2
CVE
CVE
added 2026/01/15 10:53 p.m.14 views

CVE-2026-22863

Deno before 2.6.0 is affected: node:crypto does not finalize the cipher, enabling an attacker to generate an unlimited number of encryptions and potentially mount brute‑force/secret‑learning attempts. The issue impacts cryptographic operations that could reveal server secrets; exploitation is des...

9.2CVSS6.5AI score0.0001EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/15 10:53 p.m.2 views

CVE-2026-22863

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server...

9.2CVSS5.6AI score0.0001EPSS
Exploits1References3Affected Software1
AlpineLinux
AlpineLinux
added 2026/01/15 10:53 p.m.4 views

CVE-2026-22863

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server...

9.2CVSS6.9AI score0.0001EPSS
Exploits1References2
OSV
OSV
added 2026/01/15 10:53 p.m.4 views

CVE-2026-22863 Deno node:crypto doesn't finalize cipher

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server...

9.2CVSS6.7AI score0.0001EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/01/15 10:53 p.m.1 views

CVE-2026-22863 Deno node:crypto doesn't finalize cipher

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server...

9.2CVSS6.5AI score0.0001EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.4 views

PT-2026-3145

Name of the Vulnerable Software and Affected Versions Deno versions prior to 2.6.0 Description Deno is a JavaScript, TypeScript, and WebAssembly runtime. A flaw in the node:crypto polyfill allows cryptographic handles to persist beyond their intended lifespan. This results in the possibility of...

9.2CVSS5.3AI score0.0001EPSS
Exploits1References16
Packet Storm News
Packet Storm News
added 2026/01/15 12:0 a.m.3 views

Advanced Encryption Technique for Multimedia Data Using Sudoku-Based Algorithms for Enhanced Security

Encryption and Decryption is the process of sending a message in a ciphered way that appears meaningless and could be deciphered using a key for security purposes to avoid data breaches. This paper expands on the previous work on Sudoku-based encryption methods, applying it to other forms of medi...

6.8AI score
Exploits0
Rows per page
Query Builder