SJCL cryptographic library unauthorized access

The vulnerability of the sjcl.ecc.basicKey.publicKey function in the SJCL Stanford JavaScript Crypto Library is related to the absence of a necessary encryption step. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Secure Boot Bypass

The vulnerability of the Secure Boot protocol for operating systems running Windows lies in the absence of a necessary encryption step. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms...

ROS-20260420-73-0010

A vulnerability in the crypto/modes/ocb128.c component of the OpenSSL TLS and SSL protocols toolkit is related to the lack of a required encryption step. Exploitation of the vulnerability could allow an attacker to gain access to confidential data and compromise its integrity...

ROS-20260420-73-0011

A vulnerability in the crypto/modes/ocb128.c component of the OpenSSL TLS and SSL protocols toolkit is related to the lack of a required encryption step. Exploitation of the vulnerability could allow an attacker to gain access to confidential data and compromise its integrity...

Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems lies in the absence of the necessary encryption step. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Mbed TLS LMS Verify Bypass

The vulnerability of the mbedtlslmsverify function in Mbed TLS is related to the absence of a necessary encryption step. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

Tridium Niagara Framework and Tridium Niagara Enterprise Security vulnerabilities

Tridium Niagara Framework and Tridium Niagara Enterprise Security are both products of Tridium, Inc.Tridium Niagara Framework is a comprehensive software infrastructure that solves the challenges of creating appliance to enterprise applications. Tridium Niagara Enterprise Security is a...

Dell BSAFE Micro Edition Suite Trust Management Issues Vulnerability

The Dell BSAFE Micro Edition Suite is a development toolkit from Dell Inc. that provides cryptographic, certificate, and transport layer security for c/c++ applications, devices, and systems. A security vulnerability exists in Dell BSAFE Micro Edition Suite versions prior to 4.5.2 and Dell BSAFE...

AMI MegaRAC security vulnerabilities

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

Ribose RNP security vulnerability

Ribose RNP is an application from Ribose, Inc. A security vulnerability exists in Ribose RNP versions prior to 0.15.1 that stems from the lack of implementation of a required step in the cryptographic algorithm, resulting in faulty encryption and leaving the key in the plaintext state...

Fortinet FortiOS security vulnerabilities

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. Fortinet FortiOS has a...

AES OCB OpenSSL Disclosure

The vulnerability of the AES OCB mode in the OpenSSL library, where the necessary encryption step is absent. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

Huawei Smartphone security vulnerabilities

Huawei Smartphone is a smartphone from Huawei, a Chinese company. A security vulnerability exists in Huawei Smartphone that stems from a missing encryption step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may result in a denial of service to Samgr...