1517 matches found
CVE-2026-93106
CVE-2026-93106 affects the Linux kernel crash_dump subsystem. The function restore_dm_crypt_keys_to_thread_keyring() passes a keyring reference to add_key_to_keyring() for each saved dm-crypt key, but that function drops the reference on every call . When more than one key is restored, the refere...
Fedora 43 : perl-Dancer2 (2026-d0bededb87)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d0bededb87 advisory. Dancer2 gnrates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: dm-crypt, dm-verity: Disable tasklets Tasklets have an inherent problem with memory corruption. The taskletactioncommon function calls tasklettrylock, then it calls the tasklet callback, and then it calls taskletunlock. If the...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fixed a use-after-free in cryptmessage when using asynchronous crypto. The fix for CVE-2024-50047 removes the asynchronous crypto handling from cryptmessage, assuming that all crypto operations are synchronous...
Fedora 44 : perl-Dancer2 (2026-d13a2593b1)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d13a2593b1 advisory. Dancer2 gnrates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there...
Fedora 45 : perl-Dancer2 (2026-28c5da9193)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-28c5da9193 advisory. Dancer2 gnrates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there...
znc -- multiple vulnerabilities
ZNC reports: CVE-2026-82373: Use-after-free when unloading modules, triggered by unprivileged users. To mitigate, set DenyLoadMod to true. CVE-2026-82374: Null pointer dereference in crypt module, triggered by IRC server. CVE-2020-11022, CVE-2020-11023: Updated the old bundled vulnerable version ...
FreeBSD : znc -- multiple vulnerabilities (b7ae786a-af80-11f1-9800-641c67a117d8)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b7ae786a-af80-11f1-9800-641c67a117d8 advisory. ZNC reports: CVE-2026-82373: Use-after-free when unloading modules, triggered by unprivileged...
CVE-2026-38058
The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them...
CVE-2026-38058 ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere
The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them...
CVE-2026-38058
ST Engineering iDirect iQ200 VSAT terminals are affected by an information exposure flaw where an endpoint returns the complete device configuration as JSON, including the SECURITY section containing MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid w...
CVE-2026-38058 ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere
The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them...
EUVD-2026-76126
The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them...
CVE-2026-38058: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them...
PT-2026-89880
The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them...
ai.wanaku:core-persistence-mongodb (>=0.0.4, <=0.0.5), ai.wanaku:routers (>=0.0.4, <=0.0.5) +123 more potentially affected by CVE-2026-88032 via org.mongodb:mongodb-crypt (>=5.2.1, <=5.9.0)
org.mongodb:mongodb-crypt MAVEN version =5.2.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =2026.05.04, =2026.05.04, =1.2.1, =1.1.2, =1.1.2, =1.2.1, =1.2.2, =1.2.2, =1.3.0 and more Source cves: CVE-2026-88032 Source advisory: MEND:CVE-2026-88032...
ROS-20260908-73-0023
The vulnerability in perl-Crypt-DSA is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260908-73-0039
The vulnerability in perl-Crypt-DSA is related to an attack surface whose quantitative magnitude exceeds the desired maximum. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...
ROS-20260907-73-0511
The vulnerability in perl-Crypt-DSA is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...