1189 matches found
EUVD-2026-1894
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, an out-of-bounds heap read vulnerability in...
CVE-2026-21900
CryptoLib (SDLS-EP) vulnerable in versions prior to 1.4.3 due to an out-of-bounds heap read in cryptography_encrypt() when parsing JSON metadata from KMC server responses. The root cause is a flawed strtok iteration pattern using ptr + strlen(ptr) + 1, which can read one byte past allocated buffe...
CryptoLib security vulnerabilities
CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib versions prior to 1.4.3 that stems from an unfilled memory buffer allocated by the cryptographyencrypt...
PT-2026-2133
Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.3 Description CryptoLib is a software solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft and a ground station. Before versi...
PT-2026-2130
Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.3 Description CryptoLib is a software solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft and a ground station. An...
PT-2026-2132
Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.3 Description CryptoLib is a software-only solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight Syste...
CryptoLib buffer error vulnerability
CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A buffer error vulnerability exists in CryptoLib versions prior to 1.4.3 that stems from an out-of-bounds heap read in the cryptographyaeadencrypt functio...
SUSE CVE-2024-41260
A static initialization vector IV in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information email addresses when in possession of the audit events database...
MAL-2025-192570 Malicious code in @mohamed1687/iut-encrypt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c488ccf33f70ad27f3dba325a7686c40ac429f84d8ae53d608dc8103e1320adb The package @mohamed1687/iut-encrypt was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-203330
Malicious code in @mohamed1687/iut-encrypt npm...
Malicious code in @mohamed1687/iut-encrypt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c488ccf33f70ad27f3dba325a7686c40ac429f84d8ae53d608dc8103e1320adb The package @mohamed1687/iut-encrypt was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview @mohamed1687/iut-encrypt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
EUVD-2025-198572
A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploi...
JLSEC-2025-215 In Mbed TLS before 2.28.0 and 3.x before 3.1.0, `psa_cipher_generate_iv` and `psa_cipher_encrypt`...
In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...
PT-2025-48513
In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa cipher generate iv and psa cipher encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...
EUVD-2025-178223
Malicious code in kappa-notify-web-encrypt-iota npm...
EUVD-2025-179138
Malicious code in encrypt-link-alert-grep-moon npm...
EUVD-2025-176469
Malicious code in sed-sigma-encrypt-catch-warn npm...