Lucene search
K

5909 matches found

EUVD
EUVD
added 2025/10/21 12:0 a.m.4 views

EUVD-2025-35229

The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector IV in its AES-CFB encryption implementation allowing attackers with access to the application environment to reliably decrypt encrypted configuration data...

5.1CVSS6.3AI score0.00129EPSS
Exploits2References2
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.4 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS6.8AI score0.00124EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.6 views

Amazon Linux 2 : openssl-snapsafe, --advisory ALAS2OPENSSL-SNAPSAFE-2025-008 (ALASOPENSSL-SNAPSAFE-2025-008)

The version of openssl-snapsafe installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2OPENSSL-SNAPSAFE-2025-008 advisory. Issue summary: An application trying to decrypt CMS messages encrypted usingpassword based encryption can...

7.5CVSS6.7AI score0.0177EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.16 views

Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2025-1225)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1225 advisory. Issue summary: An application trying to decrypt CMS messages encrypted usingpassword based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may...

7.5CVSS6.6AI score0.02267EPSS
Exploits0References6
OSV
OSV
added 2025/10/14 10:15 a.m.1 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS5.7AI score
Exploits0References1
NVD
NVD
added 2025/10/14 10:15 a.m.11 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS0.00124EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 9:15 a.m.2 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS6.5AI score0.00124EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/14 9:15 a.m.8 views

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS0.00124EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/14 9:15 a.m.5 views

EUVD-2025-34157

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

6.7CVSS6.4AI score0.00124EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.4 views

PT-2025-46654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Transport Layer Security TLS asynchronous decryption. Specifically, if the tls strp msg hold function fails to allocate a clone of the input...

5.5CVSS7.7AI score0.00162EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.3 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2025-2246)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.8AI score0.16195EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.3 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2025-2214)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.8AI score0.16195EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/11 12:0 a.m.3 views

EulerOS 2.0 SP11 : shim (EulerOS-SA-2025-2214)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in ...

5.9CVSS7.9AI score0.16195EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/11 12:0 a.m.6 views

EulerOS 2.0 SP11 : shim (EulerOS-SA-2025-2246)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in...

5.9CVSS7.9AI score0.16195EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.2 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Oct-2025 Release 1, which stems from an out-of-bounds read in the JPEG...

5.5CVSS6.4AI score0.0011EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2016-1615

Malware in sbrugna...

9.3CVSS8.2AI score0.00755EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-1154

Malware in sbrugna...

4.9CVSS6.4AI score0.0061EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-13002

Malware in sbrugna...

7.1CVSS5.8AI score0.01473EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-4349

Malware in sbrugna...

5CVSS6.4AI score0.01386EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-2926

Malware in sbrugna...

7.5CVSS6.7AI score0.01362EPSS
Exploits0References5
Rows per page
Query Builder