35 matches found
CVE-2026-53804: Improper Neutralization of Special Elements used in an OS Command
OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...
The vulnerability of the cifs_crypto_secmech_release() function in the fs/smb/client/cifsencrypt.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the cifscryptosecmechrelease function in the fs/smb/client/cifsencrypt.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
ModulithShop 信任管理问题漏洞
ModulithShop is an online shopping mall system from the individual developers of Shopsuite. ModulithShop suffers from a Trust Management Issue vulnerability that stems from misbehavior of the component RSA/OAuth2/Database, which could lead to hard-coded credentials...
EUVD-2014-3360
Malware in sbrugna...
EUVD-2021-0070
Malware in sbrugna...
EUVD-2025-23579
Malicious code in bioql PyPI...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to cause service interruptions.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service interruptions...
PT-2025-30762
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mod hdcp hdcp1 enable encryption function calls get first active display without checking its return value. If the display list is empty, get first active display returns a null...
Vulnerability of the MySQL Server component: Security: Encryption. This component allows a hacker to gain unauthorized access for reading, modifying, or deleting data, or to cause a service failure.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions...
Vulnerability of the Server component: Security: Encryption of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.
The vulnerability of the Server component’s Security: Encryption module of the Oracle MySQL Server database management system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to cause service interruptions.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
多款Cisco产品处理逻辑错误漏洞
Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...
Nextcloud Server File Block Overwrite Vulnerability (NC-SA-2020-038)
Nextcloud Server is prone to a vulnerability where Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to cause service interruptions.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file (NC-SA-2020-038)
A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network protocol...
Odoo Access Control Error Vulnerability (CNVD-2019-30570)
Odoo is an open source commercial system from the Belgian company Odoo. An access control error vulnerability exists in the password encryption module in Odoo version 9.0 Community and Enterprise, which can be exploited by an attacker to modify another user's password...
CVE-2018-14868: Improper Authentication
Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call...
Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2019-15875)
The Cisco Firepower 2100 Series and Cisco Adaptive Security Virtual Appliance are both products of Cisco Corporation.The Firepower 2100 Series is a 2100 series firewall appliance.The Cisco Adaptive Security Virtual Appliance is a virtualized version of the Cisco ASA Adaptive Security Appliance. T...
The vulnerability of the encryption module for internal data in Philips e-Alert Unit software solutions allows a intruder to gain full access to the device’s data.
The vulnerability of the encryption module for internal data in Philips e-Alert Unit medical visualization systems arises from the rigid encoding of the cryptographic key used for encrypting internal data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full...