29606 matches found
CVE-2026-85147 Lightstarο½SmartIT Desktop Manager - Use of Hard-coded Credentials
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...
CVE-2026-75754
ASUS Control Center is affected by a combination of Missing Authentication for Critical Function , Server-Side Request Forgery (SSRF) , and Use of Hard-coded Credentials . An unauthorized network-based attacker with no prior privileges can obtain the encryption key via an HTTP request , causing a...
PT-2026-91298
In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxs dcp aes block crypt uses sg dma len without mapping the source scatterlist with dma map sg first. Therefore, sg dma len is invalid and could return zero or a stale DMA...
The Security Feature Location Problem
Software security must be realized through security features such as authentication and encryption, but which features does a system implement, and where? We present security feature location: the task of relating code locations to security features, enabling developers to understand security...
ROS-20260904-73-0011
The vulnerability in Netty is related to the absence of a necessary encryption step. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-80831: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...
CVE-2026-5522: Use of Hard-coded Credentials
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...
CVE-2026-85147: Improper Access Control
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...
PT-2026-85384
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...
PT-2026-85592
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...
PT-2026-91364
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4 set inode flagsinode, init=true in ext4 new inode is made before EXT4 INODE ENCRYPT is set. As a result, it c...
CVE-2026-80806: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...
Linux Distros Unpatched Vulnerability : CVE-2026-84962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized...
Linux Distros Unpatched Vulnerability : CVE-2026-84971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the...
Linux Distros Unpatched Vulnerability : CVE-2026-80806
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in...
Applications Restored by Veeam Kasten Disaster Recovery Fail to Export with: invalid repository password
Challenge After a Veeam Kasten Disaster Recovery KDR restore is performed on an instance of Veeam Kasten for Kubernetes running a version earlier than 8.5.4, and that instance is later upgraded to version 8.5.4 or newer, export and backup actions for the restored applications fail with an error...
Linux Distros Unpatched Vulnerability : CVE-2026-80831
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore,...
PT-2026-85647
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4 set inode flagsinode, init=true in ext4 new inode is made before EXT4 INODE ENCRYPT is set. As a result, it c...
Rocket.Chat v8.8.0
The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...
CVE-2017-1000486
README - CVE-2020-1039909 Primefaces Remote Code Execution ============================================================ SOBRE A VULNERABILIDADE CVE-2020-1039909 e uma vulnerabilidade de execucao remota de codigo RCE no framework Primefaces JSF. A falha permite que um atacante execute comandos...