29606 matches found
CVE-2026-19891 TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption
A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchangemode causes missing encryption of sensitive data. It is possible to initiate the...
CVE-2026-19891
CVE-2026-19891 affects TRENDnet TEW-WLC100 firmware (version 2.05b02) and involves an issue in the IKE Phase 1 Aggressive Mode component, specifically the /etc/racoon.conf function. The attacker can remotely manipulate the exchange_mode argument, resulting in missing encryption of sensitive data....
EUVD-2026-59607
A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchangemode causes missing encryption of sensitive data. It is possible to initiate the...
PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
...
CVE-2026-19891: Missing Encryption of Sensitive Data
A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchangemode causes missing encryption of sensitive data. It is possible to initiate the...
PT-2026-72886
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-WLC100 version 2.05b02 Description An issue exists in the IKE Phase 1 Aggressive Mode component within the /etc/racoon.conf file. Manipulation of the exchange mode argument leads to a failure in encrypting sensitive data. This fla...
cottage v0.6.7
cott age is a GitOps tool for teams to manage age-encrypted secrets in git repositories. It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. cottage also generates redacted previews of encrypt...
GO-2026-5426 vulnerabilities
Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, mcp-grafana, policy-controller, azure-workload-identity-webhook, dataplaneapi, gitlab-pages, opentofu, cloud-provider-azure, ksops, melange, kaniko, coredns, crossplane-provider-azure-storage, kyverno-notation-aws, octo-sts, cri-tool...
GO-2024-2824 vulnerabilities
Vulnerabilities for packages: cert-manager-webhook-pdns, policy-controller, gosu, go-licenses, kubecolor, neuvector-scanner, melange, ksops, docker-credential-gcr, cri-tools, oras, cfssl, jitsucom-bulker, php-fpmexporter, pulumi-language-dotnet, golangci-lint, grpcurl, gke-gcloud-auth-plugin,...
Structural Leakage in Graph Encryption: Attacks and Defenses
Graph encryption schemes GES enable secure outsourcing of graph data while supporting efficient queries. This report provides a comprehensive analysis of structural leakage in GES for single-pair shortest path SPSP queries, integrating findings from two recent works. First, we analyze PathGES, a...
Malicious code in webautomation_js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854e679284d7396f5ac4f7248839fa3704a2c72bcec08c100267b5980cd2a0d5 index.js is packed with an obfuscator.io RC4 string-array plus self-defending debugger-check wrapper. The only exported function appends a...
CVE-2026-65934
An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...
CVE-2026-19293
SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...
USTP-Secure — Updated!
USTP USTP means UDP Speedy Transmission Protocol. USTP keeps the same authenticated transport model, but the project name is now simply USTP again. By default, USTP uses AEAD for DATA. It also supports an optional negotiated cleartext + HMAC mode for DATA, where payload bytes are visible on the...
CVE-2026-65934
An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...
CVE-2026-65934
CVE-2026-65934 affects the BT122 module; an unencrypted “pause encryption request” message can cause a denial of service. The vulnerability is described in multiple sources (NVD/CVE records and CVE history) with a CVSSv4 base score of 7.1 (HIGH) and an adjacent ATT&CK-like risk under the vulnerab...
EUVD-2026-58080
An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...
CVE-2026-19293 SMP security request
SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...
CVE-2026-19293
The vulnerability CVE-2026-19293 concerns the BLE SMP (Security Manager Protocol) security request where the peripheral omits the maximum supported encryption key size. This omission can allow brute-forcing of the key more easily for an adjacent attacker. The entry cites the BLERP paper and provi...
EUVD-2026-58076
SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...