Lucene search
+L

1155 matches found

osv_ubuntu
osv_ubuntu
•added 2026/05/27 12:00 a.m.•30 views

UBUNTU-CVE-2026-46028

In the Linux kernel, the following vulnerability has been resolved: crypto: algifaead - snapshot IV for async AEAD requests AFALG AEAD AIO requests currently use the socket-wide IV buffer during request processing. For async requests, later socket activity can update that shared state before the...

5.5CVSS6.3AI score0.00123EPSS
SaveExploits0References23
Packet Storm News
Packet Storm News
•added 2026/05/18 12:00 a.m.•25 views

Botan C++ Crypto Algorithms Library 3.12.0

Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports X.509 certificates and CRLs, and PKCS 10 certificate requests, and has a high level filter/pipe message processing system. The library is easily portable to...

5.8AI score0.0046EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/05/14 12:00 a.m.•17 views

PLANET IGS-5225-8P2T4S Cryptographic Algorithm Use-After-Free

The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial-controlled switches is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow an attacker to obtain the device’s configuration file and recover...

4.6CVSS6.5AI score0.00165EPSS
SaveExploits0References3Affected Software1
Fedora
Fedora
•added 2026/05/08 1:24 a.m.•37 views

[SECURITY] Fedora 42 Update: openssl-3.2.6-4.fc42

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

7.5CVSS6.7AI score0.0103EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/05/07 12:00 a.m.•42 views

MiracleLinux 8 : openssh-8.0p1-29.el8_10 (AXSA:2026-554:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-554:03 advisory. OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode CVE-2026-35385 OpenSSH: OpenSSH: Security bypass via...

8.1CVSS7.2AI score0.00633EPSS
SaveExploits0References6
osv_clsa
osv_clsa
•added 2026/05/01 12:25 p.m.•57 views

CLSA-2026-1777633439 kernel: Fix of 142 CVEs

crypto: algifaead - Fix minimum RX size check for decryption CVE-2026-31431 - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl CVE-2026-31431 - crypto: authencesn - reject too-short AAD assoclen8 to match ESP/ESN spec CVE-2026-31431 - crypto: authencesn - Fix src offset when...

9.8CVSS6.2AI score0.03437EPSS
SaveExploits263References1
Fedora
Fedora
•added 2026/04/28 1:36 a.m.•30 views

[SECURITY] Fedora 44 Update: botan3-3.9.0-7.fc44

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \11 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

9.3CVSS6.8AI score0.00502EPSS
SaveExploits0
Fedora
Fedora
•added 2026/04/25 1:59 a.m.•26 views

[SECURITY] Fedora 44 Update: openssl-3.5.5-2.fc44

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

9.8CVSS6.7AI score0.0103EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/24 12:00 a.m.•8 views

PT-2026-54595

Уязвимость аппаратных и программных решений для хранения данных и обработки информации Dell PowerFlex Manager, PowerFlex Appliance, PowerFlex Rack связана c использованием криптографических алгоритмов, содержащих дефекты. Эксплуатация уязвимости может позволить нарушителю обойти существующие...

4.6CVSS5.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•6 views

PT-2026-56049

Уязвимость SSH-сервера системы управления Git-репозиториями Gitea связана с использованием криптографических алгоритмов, содержащих дефекты. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность и целостность защищаемой информации...

4CVSS5.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•19 views

PT-2026-35109

The codebase raises code analysis warnings related to security, including CA3075, CA5366, CA5371, CA5368, CA5369, CA5372, CA5379, CA5350, and CA5351. Most of these deal with disabling DTD processing in XML documents, but also includes cryptographic algorithm choices...

6AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/04/13 12:00 a.m.•24 views

PDFium Component Google Chrome Brute Force

The vulnerability of the PDFium component in the Google Chrome browser is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to execute a brute-force attack remotely...

7.8CVSS7.2AI score0.00119EPSS
SaveExploits0References11Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•7 views

CVE-2025-64647: Use of a Cryptographic Primitive with a Risky Implementation

IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS5.8AI score0.00206EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/12 6:30 p.m.•31 views

EUVD-2026-11629

A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device...

9.2CVSS5.8AI score0.00362EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/05 3:30 p.m.•32 views

EUVD-2026-9823

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux Config string generation, web console export modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated with program routin...

8.7CVSS5.9AI score0.00339EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2026/03/03 9:15 p.m.•24 views

CVE-2025-14480

IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS5.8AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/03 8:42 p.m.•51 views

CVE-2025-14456

IBM MQ Appliance versions 9.4 CD through 9.4.4.1 are vulnerable to a cryptographic weakness (CWE-327 ) due to the use of weaker than expected cryptographic algorithms . This flaw could allow an attacker to decrypt highly sensitive information . The vulnerability is addressed under known issue DT4...

5.9CVSS5.8AI score0.0018EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/03 8:41 p.m.•12 views

CVE-2025-14480 IBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptographic algorithms

IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.1CVSS5.8AI score0.00177EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/02/26 4:52 p.m.•23 views

Security Bulletin: IBM MQ Appliance uses weaker than expected cryptographic algorithms (CVE-2025-14456)

Summary IBM MQ Appliance has addressed use of weaker than expected cryptographic algorithms. Vulnerability Details CVEID:CVE-2025-14456 DESCRIPTION: IBM MQ Appliance uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CWE:CWE-32...

5.9CVSS5.9AI score0.0018EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/18 12:00 a.m.•16 views

SCADA System Web Server Disclosure

The vulnerability of the FAST/TOOLS SCADA system’s web server is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

7.5CVSS6.6AI score0.00176EPSS
SaveExploits0References2
Rows per page
Query Builder