CVE-2026-53804: Improper Neutralization of Special Elements used in an OS Command

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

Linux kernel CIFS Crypto DoS

The vulnerability of the cifscryptosecmechrelease function in the fs/smb/client/cifsencrypt.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ModulithShop Trust Management Vulnerabilities

ModulithShop is an online shopping mall system from the individual developers of Shopsuite. ModulithShop suffers from a Trust Management Issue vulnerability that stems from misbehavior of the component RSA/OAuth2/Database, which could lead to hard-coded credentials...

EUVD-2021-0070

Malware in sbrugna...

EUVD-2014-3360

Malware in sbrugna...

EUVD-2025-23579

Malicious code in bioql PyPI...

Server Encryption MySQL DoS

The vulnerability of the MySQL Server component’s Security: Encryption module is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service interruptions...

PT-2025-30762

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mod hdcp hdcp1 enable encryption function calls get first active display without checking its return value. If the display list is empty, get first active display returns a null...

MySQL Server Encryption Unauthorized Access

The vulnerability of the MySQL Server component’s Security: Encryption module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions...

Oracle MySQL Server Encryption DoS

The vulnerability of the Server component’s Security: Encryption module of the Oracle MySQL Server database management system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

Server Encryption MySQL DoS

The vulnerability of the MySQL Server component’s Security: Encryption module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Multiple Cisco products have vulnerabilities related to processing logic errors

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Nextcloud Server File Block Overwrite Vulnerability (NC-SA-2020-038)

Nextcloud Server is prone to a vulnerability where Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

Server Encryption MySQL DoS

The vulnerability of the MySQL Server component’s Security: Encryption module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file (NC-SA-2020-038)

A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file...

Server MySQL Encryption Unauthorized Access

The vulnerability of the MySQL Server component’s Security: Encryption module is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network protocol...

Odoo Access Control Error Vulnerability (CNVD-2019-30570)

Odoo is an open source commercial system from the Belgian company Odoo. An access control error vulnerability exists in the password encryption module in Odoo version 9.0 Community and Enterprise, which can be exploited by an attacker to modify another user's password...

CVE-2018-14868: Improper Authentication

Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call...

Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2019-15875)

The Cisco Firepower 2100 Series and Cisco Adaptive Security Virtual Appliance are both products of Cisco Corporation.The Firepower 2100 Series is a 2100 series firewall appliance.The Cisco Adaptive Security Virtual Appliance is a virtualized version of the Cisco ASA Adaptive Security Appliance. T...

Philips e-Alert Unit Encryption Module Full Access

The vulnerability of the encryption module for internal data in Philips e-Alert Unit medical visualization systems arises from the rigid encoding of the cryptographic key used for encrypting internal data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full...