827 matches found
CVE-2025-61739
CVE-2025-61739 concerns nonce reuse that enables a replay attack or decryption of captured packets. Documents identify the affected products as Johnson Controls IQ Panels2, IQ Panels2+, IQHub, IQPanel 4, and PowerG, with the issue rooted in nonce reuse and/or weak RNG affecting confidentiality an...
Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data version 5.2.2 Vulnerability Details CVEID:CVE-2025-45767 DESCRIPTION: jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim o...
EUVD-2025-203084
Apache StreamPark has a hard-coded encryption key...
CVE-2025-54947
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain...
CVE-2025-54947 Apache StreamPark: Use hard-coded key vulnerability
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain...
The vulnerability of OpenBao’s encryption and secret management system, related to the disclosure of information through log files, allows access to confidential information.
The vulnerability of the OpenBao encryption and secret management system is related to the disclosure of information through log files. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...
AVEVA Edge 加密问题漏洞
AVEVA Edge is a highly scalable and flexible HMI/SCADA software from UK-based Jianwei Software AVEVA. AVEVA Edge suffers from an encryption issue vulnerability that stems from an attacker being able to reverse engineer an Edge user's application native password or Active Directory password by...
DuckDB 加密问题漏洞
DuckDB is an in-process SQL OLAP database management system from DuckDB open source. A cryptographic issue vulnerability exists in DuckDB versions 1.4.0 through prior to 1.4.2, which stems from a cryptographic implementation issue that could lead to key disclosure or bypass integrity checks...
Dell PowerScale OneFS 加密问题漏洞
DELL PowerScale OneFS is Dell's horizontally scalable clustered file system designed to manage unstructured data and support enterprise-class storage capabilities. DELL PowerScale OneFS suffers from an encryption issue vulnerability that stems from the use of an insecure encryption algorithm, whi...
CVE-2025-54471
NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...
Microsoft多款产品 加密问题漏洞
Microsoft Visual Studio and others are products of Microsoft Corporation, U.S.A. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, Microsoft .NET Framework is a comprehensive and consistent programming model, and a development...
EUVD-2015-7656
Malware in sbrugna...
EUVD-2020-17921
Malware in sbrugna...
EUVD-2015-5830
Malware in sbrugna...
EUVD-2018-10719
Malware in sbrugna...
EUVD-2021-22162
Malware in sbrugna...
EUVD-2011-4585
Malware in sbrugna...
EUVD-2018-7462
Malware in sbrugna...