Jack Lloyd Botan encryption issue vulnerability

Versions 1.11.34 through 3.13.0 of Jack Lloyd Botan contain an encryption-related vulnerability. This vulnerability arises because the ocspcheck command fails to validate the signature or authorization of the response when it receives an OCSP response from a certificate’s Authority Information...

Microsoft Edge (Chromium-based) encryption issue vulnerability

A vulnerability related to encryption issues exists in Microsoft Edge Chromium-based versions from 1.0.0.0 up to and including 156.0.4314.42. This vulnerability stems from improper validation of encrypted signatures, potentially allowing unauthenticated attackers to perform network spoofing...

WatchGuard Mobile VPN with SSL Client encryption issue vulnerability

A vulnerability related to encryption issues exists in WatchGuard Mobile VPN with SSL Client versions from 12.0 up to and including 2026.4. This vulnerability stems from the transmission of sensitive information in plaintext, allowing local attackers to capture loopback traffic and obtain users’...

Mozilla Firefox security vulnerabilities

Mozilla Firefox has a security vulnerability stemming from an encryption issue in the WebRTC: Networking component...

HP LaserJet Printers Cryptographic Issues (CVE-2013-4828)

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via...

tomcat security, bug fix, and enhancement update

An update is available for tomcat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...

RHEL 10 : tomcat9 (RHSA-2026:36790)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36790 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages...

DAVIDO Bytes::Random::Secure encryption issue vulnerability

Versions 0.29 and earlier of DAVIDO Bytes::Random::Secure contain an encryption-related vulnerability. This vulnerability arises because the internal state of PRNG is shared across processes when objects are initialized or function interfaces are used prior to creating a fork process. As a result...

BIAFRA Dancer2::Plugin::Auth::OAuth encryption issue vulnerability

Versions of BIAFRA Dancer2::Plugin::Auth::OAuth prior to version 0.22 contain an encryption-related vulnerability. This vulnerability arises because the default nonce is generated using the MD5 hash of epoch time, making it predictable...

RHEL 10 : podman (RHSA-2026:17040)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:17040 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

Apache Tomcat 9.0.92 < 9.0.117 Improper Authentication Vulnerability (CVE-2026-34500)

The version of Tomcat installed on the remote host is 9.0.92 prior to 9.0.117. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.117security-9 advisory. - CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled and...

GHSA-QCMW-8MM4-4P28 Antrea has Missing Encryption of Sensitive Data

Impact This is a missing encryption vulnerability CWE-311 affecting inter-Node Pod traffic. In Antrea clusters configured for dual-stack networking with IPsec encryption enabled trafficEncryptionMode: ipsec, Antrea fails to apply encryption for IPv6 Pod traffic. While the IPv4 traffic is correctl...

OESA-2026-1749 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based...

Restore to AWS EC2 Fails with: "ClientError: Unknown OS / Missing OS files" or "FirstBootFailure"

Article Applicability This article applies to Veeam Backup & Replication versions prior to 13.1. 0.411 12.3.2.x / 13.0.x. Starting with Veeam Backup & Replication build 13.1.0.411, this issue no longer occurs. The workarounds described in this article are not required in 13.1. 0.411 and later...

CVE-2023-40440

This issue was addressed with improved state management of S/MIME encrypted emails. This issue is fixed in macOS Monterey 12.6.8. A S/MIME encrypted email may be inadvertently sent unencrypted...

CVE-2019-18238

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account...

CVE-2023-49927

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not...

CVE-2023-25957

A vulnerability has been identified in Mendix SAML Mendix 7 compatible All versions = V1.16.4 = V2.2.0 = V3.1.9 = V3.1.8 = V3.1.9 = V3.1.8 V3.2.6. The affected versions of the module insufficiently verify the SAML assertions. This could allow unauthenticated remote attackers to bypass...

CVE-2023-50257

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

CVE-2022-31044

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.2.0 and 4.2.1, resulting in use of the encryption layer for Key Storage possibly not working. Any credentials created...