14759 matches found
CVE-2025-15598 Dataease SQLBot JWT Token auth.py validateEmbedded signature verification
A vulnerability was found in Dataease SQLBot up to 1.5.1. This impacts the function validateEmbedded of the file backend/apps/system/middleware/auth.py of the component JWT Token Handler. Performing a manipulation results in improper verification of cryptographic signature. The attack can be...
CVE-2025-15598: Improper Verification of Cryptographic Signature
A vulnerability was found in Dataease SQLBot up to 1.5.1. This impacts the function validateEmbedded of the file backend/apps/system/middleware/auth.py of the component JWT Token Handler. Performing a manipulation results in improper verification of cryptographic signature. The attack can be...
CVE-2025-14923: Use of Hard-coded Cryptographic Key
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Utility when administering security settings...
PT-2026-22726
Name of the Vulnerable Software and Affected Versions Dataease SQLBot versions up to 1.5.1 Description A flaw exists in Dataease SQLBot that relates to improper cryptographic signature verification. The issue is located within the validateEmbedded function in the...
CVE-2025-14456: Use of a Broken or Risky Cryptographic Algorithm
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...
CVE-2025-14480: Use of a Broken or Risky Cryptographic Algorithm
IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2025-47383
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
CVE-2025-47378
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...
CVE-2025-47383
CVE-2025-47383 describes a weak configuration that may cause a cryptographic issue when a VoWiFi call is triggered from UE. Connected records repeat the description and list a CVSS v3.1 base score of 7.2 (HIGH) with NETWORK attack vector, low attack complexity, and high impact on confidentiality,...
CVE-2025-47383 Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
EUVD-2025-208190
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
CVE-2025-47383
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
CVE-2025-47383 Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...
EUVD-2025-208187
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...
CVE-2025-47378
CVE-2025-47378 is described as a cryptographic issue where a shared VM reference allows HLOS to boot the loader and access the certificate chain. Connected sources corroborate a cryptographic exposure affecting HLOS/boot chain components and reference related advisories from Red Hat and NCSC; how...
CVE-2025-47378
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.7 Vulnerability Details CVEID:CVE-2025-12818 DESCRIPTION: Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an...
Comparison of Credential Management Systems Based on the Standards of IEEE, ETSI, and YD/T 3957-2021
As V2X Vehicle-to-Everything technology becomes increasingly prevalent, the security of V2X networks has garnered growing attention worldwide. In North America, the IEEE 1609 series standards are primarily used, while Europe adopts the ETSI series standards, and China has also established its...
PT-2026-22646
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A weak configuration can result in a cryptographic issue when a VoWiFi call is initiated from a User Equipment UE. Recommendations At the moment, there is no information about a newer version that...