5816 matches found
The vulnerability of the Python RSA cryptographic library, which stems from the use of cryptographic algorithms with defects, allows a perpetrator to gain access to confidential data.
The vulnerability of the Python RSA cryptographic library is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...
openssl: SSL_select_next_proto buffer overread
A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...
libgcrypt: vulnerable to Marvin Attack
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...
CVE-2025-1805
CVE-2025-1805 affects Crypt::Salt for Perl 0.01, where an insecure rand() is used to generate cryptographic salts. The issue’s impact is described as partial in the assessment (base CVSS 5.3, MEDIUM). Exploitation details are not provided in the sources. Remediation is not specified; several entr...
Malicious code in cryptographymethods (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2024-12797)
Summary IBM Security SOAR uses an older version of the Python cryptography/openssl library which has a known vulnerability. An update has been released which address this issue. It is recommended upgrading to Version 51.0.5.1 or later of IBM Security SOAR. Vulnerability Details CVEID:CVE-2024-127...
CVE-2024-31896
IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
PT-2025-12815 · Ibm · Ibm Spss Statistics
Name of the Vulnerable Software and Affected Versions: IBM SPSS Statistics versions 26.0 through 29.0.2 Description: The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For versions 26...
CryptoLib 安全漏洞
CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib version 1.3.3 and earlier, which stems from a heap overflow in the CryptoTMProcessSecurity function when...
CLSA-2025-1742806909 kernel: Fix of 37 CVEs
HID: core: zero-initialize the report buffer CVE-2024-50302 - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - bus: mhi: host: Add alignment check for event ring read pointer CVE-2023-52494 - net: sched: fix ets qdisc OOB Indexing CVE-2025-21692 - parport: Proper fix for...
CLSA-2025-1742723010 openssl: Fix of CVE-2024-2408
CVE-2024-2408: introduce implicit rejection mechanism for RSA PKCS1 v1.5...
NCSC Releases Post-Quantum Cryptography Timeline
The UK's National Computer Security Center part of GCHQ released a timeline--also see their blog post--for migration to quantum-computer-resistant cryptography. It even made The Guardian...
USN-7363-1 pam-pkcs11 vulnerabilities
Marcus Rückert and Matthias Gerstner discovered that PAM-PKCS11 did not properly handle certain return codes when authentication was not possible. An attacker could possibly use this issue to bypass authentication. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. CVE-2025-24531 It was...
Spring Security BCryptPasswordEncoder does not enforce maximum password length
BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same...
openssl security update
An update is available for openssl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...
RLSA-2025:1330 Important: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected CVE-2024-12797 For more...
thunderbird: Downloading of OpenPGP keys from WKD used incorrect padding
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: When requesting an OpenPGP key from a WKD server, an incorrect padding size was used, and a network observer could have learned the length of the requested email address...
abcvoting (>=2.12.0, <=2.19.2), agenticx (>=0.1.3, <=0.2.2) +244 more potentially affected by unknown CVE via gmpy2 (>=2.0.8, <=2.4.0a1)
gmpy2 PYPI version =2.0.8, =2.12.0, =0.1.3, =0.1.0, =0.1.0, =0.1.2, =0.1.11, =1.0.0, =0.0.1, =0.5.33, =0.0.1, =0.1.2.4, =0.0.1, =0.0.4 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-GMPY2-9610483...
