CVE-2019-7886

A cryptograhic flaw exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A weak cryptograhic mechanism is used to generate the intialization vector in multiple security relevant contexts...

CVE-2019-16208

Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...

CVE-2019-16150

Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClient for Windows prior to 6.4.0 may allow an attacker with access to the local storage or the configuration backup file to decrypt the sensitive data via knowledge of the hard-cod...

CVE-2025-47333: Use After Free

Memory corruption while handling buffer mapping operations in the cryptographic driver...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates in the processing of buffer mapping operations in the cryptographic driver, which may result in memory corruption...

CVE-2025-47345: Reusing a Nonce, Key Pair in Encryption

Cryptographic issue may occur while encrypting license data...

CVE-2025-47333 Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver...

CVE-2025-47333 Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver...

USN-7922-4 linux-raspi, linux-raspi-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - Network drivers; - Pin controllers...

USN-7922-4: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - Network drivers; - Pin controllers...

Use Of A Hard-Coded Cryptographic Key

org.apache.streampark, streampark is vulnerable to Use of a Hard-Coded Cryptographic Key. The vulnerability is due to the use of a fixed, immutable encryption key in the application, which allows an attacker to recover the key through code analysis and decrypt sensitive data or forge encrypted...

PT-2026-1536

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A cryptographic issue may occur while encrypting license data. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Quest KACE Systems Management Appliance Cryptographic Signature Verification

The vulnerability of the Quest KACE Systems Management Appliance SMA tool for comprehensive network device management is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to upload backup files into the system remotely...

Rust curve25519‑dalek Data Compromise

The vulnerability of the Rust library for arithmetic operations on the curve25519‑dalek elliptic curve is related to the removal of optimization during compilation or the elimination of critical code. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of the...

PT-2026-1528

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description A memory corruption issue exists when handling buffer mapping operations within the cryptographic driver. The issue involves a flaw in how the driver manages memory, potentially leading to crashes or unexpect...

Security Parameter Analysis of the LINEture Post-Quantum Digital Signature Scheme

This paper presents a comprehensive cryptographic analysis of the security parameters of the LINEture post-quantum digital signature scheme, which is constructed using matrix algebra over elementary abelian 2-groups. We investigate the influence of three principal parameters. First, the word size...

PT-2026-1358

Name of the Vulnerable Software and Affected Versions badkeys versions 0.0.15 and below Description badkeys is a tool and library used for checking cryptographic public keys for known issues. In versions 0.0.15 and below, an attacker can inject content containing ASCII control characters, such as...

CVE-2026-21444: Use of a Broken or Risky Cryptographic Algorithm

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used...

TP-Link TL-WR820N 2.80 Weak Cryptography

TP-Link TL-WR820N version 2.80 uses weak cryptographic algorithms for SSH...

PT-2026-25780

Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.6.9 Description Authlib, a Python library for building OAuth and OpenID Connect servers, contains a cryptographic padding oracle vulnerability in the implementation of the JSON Web Encryption JWE RSA1 5 key manageme...