Lucene search
K

1057 matches found

OSV
OSV
added 2022/06/28 6:50 p.m.7 views

GSD-2022-1003165 dm crypt: make printing of the key constant-time

dm crypt: make printing of the key constant-time This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/06/28 6:23 p.m.7 views

GSD-2022-1002851 dm crypt: make printing of the key constant-time

dm crypt: make printing of the key constant-time This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.2 views

Malicious code in ps-crypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3344ece704cd154a5d31406e030fcde233dcb88e1b8c72f5790bb4e9d1aa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.8 views

MAL-2022-5501 Malicious code in ps-crypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3344ece704cd154a5d31406e030fcde233dcb88e1b8c72f5790bb4e9d1aa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2022/05/20 11:44 p.m.30 views

CVE-2020-28924

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

7.5CVSS1.2AI score0.00352EPSS
Exploits1References1
Rockylinux
Rockylinux
added 2022/05/17 7:12 a.m.12 views

new packages: perl-Crypt-OpenSSL-RSA

An update is available for perl-Crypt-OpenSSL-RSA. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

2.2AI score
Exploits0
Rockylinux
Rockylinux
added 2022/05/17 7:12 a.m.7 views

new packages: perl-Crypt-OpenSSL-Bignum

An update is available for perl-Crypt-OpenSSL-Bignum. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see th...

2.2AI score
Exploits0
Fedora
Fedora
added 2022/05/07 5:6 a.m.17 views

[SECURITY] Fedora 36 Update: golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc36

Store and retrieve encrypted configs from etcd or consul...

7.5CVSS2.1AI score0.00089EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.7 views

Fedora: Security Advisory for golang-github-xordataexchange-crypt (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.00089EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.6 views

Fedora: Security Advisory for golang-github-xordataexchange-crypt (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.00089EPSS
Exploits0References2
Fedora
Fedora
added 2022/04/28 5:55 a.m.32 views

[SECURITY] Fedora 34 Update: golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc34

Store and retrieve encrypted configs from etcd or consul...

7.5CVSS2.1AI score0.00089EPSS
Exploits0
Fedora
Fedora
added 2022/04/28 5:53 a.m.22 views

[SECURITY] Fedora 35 Update: golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc35

Store and retrieve encrypted configs from etcd or consul...

7.5CVSS2.1AI score0.00089EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2022/04/22 9:3 p.m.61 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6.1CVSS3.8AI score0.0024EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/04/22 5:15 p.m.1 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6.1CVSS5.9AI score0.0024EPSS
Exploits0References3
NVD
NVD
added 2022/04/22 5:15 p.m.11 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6.1CVSS0.0024EPSS
Exploits0References2
OSV
OSV
added 2022/04/22 5:15 p.m.10 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6.1CVSS6AI score
Exploits0References2
Prion
Prion
added 2022/04/22 5:15 p.m.11 views

Design/Logic Flaw

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

4.3CVSS5.9AI score0.0024EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/22 4:17 p.m.11 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6.1AI score0.0024EPSS
Exploits0References2
CVE
CVE
added 2022/04/22 4:17 p.m.71 views

CVE-2022-29589

CVE-2022-29589 affects Crypt Server prior to version 3.3.0. The issue is an XSS in the index view related to serial, computername, and username fields. The underlying cause is not detailed in the provided documents beyond this linkage. Public references indicate the fix was released in version 3....

6.1CVSS5.9AI score0.0024EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/04/22 12:0 a.m.2 views

Crypt-Server 跨站脚本漏洞

Crypt-Server is a Django web application by Graham Gilbert, an individual developer in the United States. It is used to host file library keys sent by the Crypt client application. A security vulnerability exists in Crypt-Server versions prior to 3.3.0, which stems from allowing the use of XSS in...

6.1CVSS6.2AI score0.0024EPSS
Exploits0References4
Rows per page
Query Builder