EUVD-2025-22944

Malicious code in bioql PyPI...

LSN-0100-1 Kernel Live Patch Security Notice

It was discovered that the SMB network file sharing protocol implementation in the Linux kernel did not properly handle certain error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary...

Idpy Pysaml2 Data Forgery Issue Vulnerability

Idpy Pysaml2 is a Python-based SAML server implementation from the Idpy community. Idpy PySAML2 before 6.5.0 suffers from a Data Forgery Issue vulnerability that stems from the presence of a Cryptographic Signature Validation Error vulnerability. An attacker can exploit this vulnerability to...

Nextcloud Server Encryption Block Password Phrase Generation Error Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A cryptographic block cipher phrase generation error vulnerability exists in Nextcloud Server 19.0.1. An attacker could exploit the vulnerability to overwrite...

Orpak SitOmat Encryption Error Vulnerability

Orpak SitOmat is a remote takeover refueling system from Orpak India. A cryptographic error vulnerability exists in Orpak SitOmat that originates when the program passes sensitive information in plaintext, which can be exploited by an attacker to obtain credentials and bypass authentication...

CVE-2013-4345

Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the...

GLSA-201203-13 : Openswan: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201203-13 Openswan: Denial of Service Two vulnerabilities have been found in Openswan: Improper permissions are used on /var/run/starter.pid and /var/lock/subsys/ipsec CVE-2011-2147. Openswan contains a use-after-free error in the...