11726 matches found
CVE-2025-21450
Cryptographic issue occurs due to use of insecure connection method while downloading...
Improper Verification Of Cryptographic Signature
Clerk is vulnerable to improper verification of cryptographic signature. The vulnerability is due to the use of the verifyWebhook helper, which may accept improperly signed webhook events, allowing an attacker to forge webhook requests and potentially trigger unauthorized actions...
The vulnerability of the Microsoft 365 Apps for Enterprise package, related to the use of cryptographic algorithms containing defects, allows a hacker to circumvent security restrictions.
The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
ROS-20250710-05
The vulnerability in the Perl programming language is due to the fact that the software uses the function rand as the default entropy source, which is not cryptographically secure. Exploitation of the vulnerability could allow an attacker to bypass the implemented security restrictions...
PT-2025-29131
Name of the Vulnerable Software and Affected Versions: liboqs versions prior to 0.14.0 Description: liboqs is a C-language cryptographic library providing post-quantum cryptography algorithm implementations. Secret-dependent branches were identified in the HQC key encapsulation mechanism referenc...
CVE-2025-7214
A vulnerability classified as problematic was found in FNKvision FNK-GU2 up to 40.1.7. Affected by this vulnerability is an unknown functionality of the file /etc/shadow of the component MD5. The manipulation leads to risky cryptographic algorithm. It is possible to launch the attack on the...
CVE-2025-7214 FNKvision FNK-GU2 MD5 shadow risky encryption
A vulnerability classified as problematic was found in FNKvision FNK-GU2 up to 40.1.7. Affected by this vulnerability is an unknown functionality of the file /etc/shadow of the component MD5. The manipulation leads to risky cryptographic algorithm. It is possible to launch the attack on the...
CVE-2025-7214
CVE-2025-7214 affects FNKvision FNK-GU2 (≤ 40.1.7). The vulnerability involves an unspecified function in the MD5 component reading/writing the /etc/shadow file, leading to a risky cryptographic algorithm. Impact is described as feasible to launch on the physical device, with high attack complexi...
PT-2025-28963 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: Kaseya Rapid Fire Tools Network Detective versions through 2.0.16.0 Description: A cryptographic implementation flaw exists in the password encryption mechanism within the EncryptionUtil class. Symmetric encryption is implemented in a...
PT-2025-28840 · Unknown · Fnkvision Fnk-Gu2
Name of the Vulnerable Software and Affected Versions: FNKvision FNK-GU2 versions through 40.1.7 Description: A problematic vulnerability exists due to a risky cryptographic algorithm related to an unknown functionality of the file /etc/shadow within the MD5 component. The attack can be launched ...
On the Impossibility of Separating Intelligence from Judgment: the Computational Intractability of Filtering for AI Alignment
With the increased deployment of large language models LLMs, one concern is their potential misuse for generating harmful content. Our work studies the alignment challenge, with a focus on filters to prevent the generation of unsafe information. Two natural points of intervention are the filterin...
Approximating Euler Totient Function Using Linear Regression on RSA Moduli
The security of the RSA cryptosystem is based on the intractability of computing Euler's totient function phin for large integers n. Although deriving phin deterministically remains computationally infeasible for cryptographically relevant bit lengths, and machine learning presents a promising...
CVE-2024-49783 IBM OpenPages with Watson information disclosure
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data, they could exploit this vulnerability t...
CVE-2024-49784 IBM OpenPages with Watson information disclosure
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AES encryption and CBC mode. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data values...
CVE-2024-49784
IBM OpenPages with Watson (versions 8.3 and 9.0) contains a cryptographic weakness in the storage of encrypted data using AES-CBC, which could allow an attacker with database or server-file access to extract encrypted values and potentially apply further cryptographic methods to recover plaintext...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data - Circumvention of a security measure - Execution of arbitrary code - Accessin...
USN-7594-3 linux-aws, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - RISC-V architecture; - User-Mode Linux UML; - x...
CVE-2025-49756
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally...