5552 matches found
CVE-2025-58181
CVE-2025-58181 involves unbounded memory consumption due to SSH servers parsing GSSAPI authentication requests without validating the number of mechanisms. The connected AWS Linux advisories indicate the affected package is nerdctl (e.g., nerdctl-2.2.1-1.amzn2023.0.1.x86_64 with updated packages ...
Oracle Business Intelligence Enterprise Edition (October 2025 CPU)
The 8.2.0.0.0 and 12.2.1.4.0 versions of Oracle Business Intelligence Enterprise Edition installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle...
Average Hardness of SIVP for Module Lattices of Fixed Rank
The problem of finding short vectors in Euclidean lattices is a central hard problem in complexity theory. The case of module lattices i.e., lattices which are also modules over a number ring is of particular interest for cryptography and computational number theory. The hardness of finding short...
CVE-2025-54340
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is a Broken or Risky Cryptographic Algorithm...
CVE-2025-54340
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is a Broken or Risky Cryptographic Algorithm...
CLSA-2025-1763137741 python3.11-cryptography: Fix of CVE-2023-49083
CVE-2023-49083: fix crash when loading PKCS7 bundle with no certificates - Fix RUSTFLAGS macro expansion in build process...
Security Bulletin: A vulnerability in WebSphere Application Server Liberty affects IBM Enterprise Application Service for Java (CVE-2020-36732)
Summary IBM Enterprise Application Service for Java is affected by a vulnerability in WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an...
PT-2025-46980
Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A flaw exists in the Application Server component of the software due to the use of a Broken or Risky Cryptographic Algorithm. Recommendations Update to a version beyond...
EUVD-2025-175919
Malicious code in tool-nightmare-cryovolcano-cryptography npm...
EUVD-2025-179478
Malicious code in cryptography-epimetheus-prettier-plugin-markdown-run-script npm...
Malicious code in tool-nightmare-cryovolcano-cryptography (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76c88215df8fdb3d155deb47358326c302d81107bace56723235b1944267551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177693
Malicious code in nconf-cryptography-paleoanthropology-janus npm...
EUVD-2025-178778
Malicious code in ganymede-metabolomics-cryptography-metalsmith npm...
EUVD-2025-176249
Malicious code in spinner-cryptography-acamar-elara npm...
EUVD-2025-179480
Malicious code in cryptography-biohacking-xml-graphql npm...
EUVD-2025-180407
Malicious code in antimatter-celeste-meissa-cryptography npm...
EUVD-2025-177266
Malicious code in perseus-ablation-elara-cryptography npm...
EUVD-2025-176006
Malicious code in terser-subscription-kuiperbelt-cryptography npm...