5659 matches found
CVE-2026-21751
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...
ROOT-APP-NUGET-CVE-2026-50648 CVE-2026-50648 in System.Security.Cryptography.Xml - Patched by Root
Root has patched CVE-2026-50648 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-12797 CVE-2024-12797 in cryptography - Patched by Root
Root has patched CVE-2024-12797 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34073 CVE-2026-34073 in cryptography - Patched by Root
Root has patched CVE-2026-34073 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-26007 CVE-2026-26007 in cryptography - Patched by Root
Root has patched CVE-2026-26007 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-537C-GMF6-5CCF GHSA-537c-gmf6-5ccf in cryptography - Patched by Root
Root has patched GHSA-537c-gmf6-5ccf in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root
Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69247 CVE-2026-69247 in cryptography - Patched by Root
Root has patched CVE-2026-69247 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-39892 CVE-2026-39892 in cryptography - Patched by Root
Root has patched CVE-2026-39892 in the cryptography package for Root:PyPI. Multiple fixed versions available...
CVE-2026-77151
lin-snow Ech0 (versions up to 5.4.1 ) is affected by a cryptographic weakness in the MD5Encrypt function located in internal/util/crypto/crypto.go. The use of MD5 as a hashing algorithm is considered a risky cryptographic practice, as MD5 is known to be collision-prone and unsuitable for security...
CVE-2026-77151 lin-snow Ech0 crypto.go MD5Encrypt risky encryption
A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...
CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5
CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5. A patched version of the package is available...
MINI-XC9P-Q486-J2JQ
Bulletin has no description...
Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority
SummaryRepo under test: https://github.com/Netflix/lemurWhen ADMINONLYAUTHORITYCREATION=False an explicitly supported and documented configuration, POST /api/1/authorities with type=subca never verifies that the caller holds AuthorityPermission on the supplied parent authority. The parent field i...
CVE-2026-50577 ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter
ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration leaves requestcounter unchanged in app/vau/VAUProtokoll.py while constructing VAU messages. The frozen client request counte...
CVE-2026-74888
opensslencrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KDF whose security properties have not been formally analyzed. Attackers can exploit this weakened key derivation to more efficiently crack passwords...
MINI-GPG7-5X8Q-7R8Q
Bulletin has no description...
MINI-HWHF-PCQC-4H74
Bulletin has no description...