CVE-2022-25332 SK_LOAD timing side channel during AES module decryption in Texas Instruments OMAP L138

The AES implementation in the Texas Instruments OMAP L138 secure variants, present in mask ROM, suffers from a timing side channel which can be exploited by an adversary with non-secure supervisor privileges by managing cache contents and collecting timing information for different ciphertext...

CVE-2022-24401

CVE-2022-24401 concerns the TETRA system’s Air Interface Encryption (AIE) keystream generator. The root cause is IV generation based on TDMA frame counters broadcast unauthenticated, enabling an adversary to manipulate counters observed by a mobile station and provoke keystream re-use. This can a...

CVE-2022-24402

CVE-2022-24402 affects TETRA TEA1: the keystream generator’s key register initialization compresses an 80-bit key to 32 bits, creating insufficient entropy and enabling feasible brute-force search. Documented in multiple sources; no patch details provided in the connected documents. Remediation s...

TETRA BURST Security Vulnerability

TETRA BURST is a terrestrial trunked radio standard for radio communications from TETRA BURST. TETRA suffers from a security vulnerability that stems from a backdoor in the TEA1 algorithm that reduces the original 80-bit key to one that can be easily brute-force deciphered on consumer hardware in...

mycli Encryption Problem Vulnerability

mycli is a dbcli open source MySQL terminal client with auto-completion and syntax highlighting. A security vulnerability exists in mycli version 1.27.0, which stems from an insufficient encryption strength issue. An attacker can exploit the vulnerability to view sensitive information via...

CVE-2023-44690

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py...

CVE-2023-44690

CVE-2023-44690 affects mycli 1.27.0, with root cause described as inadequate encryption strength in /mycli/config.py that could allow viewing sensitive information. The connected sources (NVD, OSV, GHSA, Debian/Alpine listings) corroborate this descriptor. No explicit exploit details, affected ve...

Texas Instruments OMAP L138 Security Vulnerability

The Texas Instruments OMAP L138 is a DSP+ARM industrial processor from Texas Instruments. A security vulnerability exists in the Texas Instruments OMAP L138 secure variants, which stems from the ES implementation being susceptible to a timing side-channel, which can be exploited by an attacker to...

CVE-2023-44690

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py...

Motorola MTM5000 Security Vulnerability

The Motorola MTM5000 is a mobile radio from Motorola, USA. A security vulnerability in the Motorola MTM5000, which stems from a lack of pointer validation of parameters passed to the Trusted Execution Environment TEE module, can be exploited by an attacker to obtain secure supervised code executi...

PT-2023-12785 · Texas Instruments · Texas Instruments Omap L138

Name of the Vulnerable Software and Affected Versions: Texas Instruments OMAP L138 secure variants affected versions not specified Description: The AES implementation in the Texas Instruments OMAP L138 suffers from a timing side channel. This can be exploited by an adversary with non-secure...

TETRA BURST Security Vulnerability

TETRA BURST is a terrestrial trunked radio standard for radio communications from TETRA BURST. A security vulnerability exists in TETRA BURST that stems from the Air Interface Encryption AIE keystream generator's dependence on network time, which can be publicly broadcast in an unauthenticated...

CVE-2023-44690

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py...

CVE-2023-44690

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py...

New Admin Takeover Vulnerability Exposed in Synology's DiskStation Manager

A medium-severity flaw has been discovered in Synology's DiskStation Manager DSM that could be exploited to decipher an administrator's password and remotely hijack the account. "Under some rare conditions, an attacker could leak enough information to restore the seed of the pseudorandom number...

[SECURITY] Fedora 38 Update: icecat-115.3.1-7.rh2.fc38

GNU IceCat is the GNU version of the Firefox ESR browser. Extensions included to this version of IceCat: LibreJS GNU LibreJS aims to address the JavaScript problem described in the article "The JavaScript Trap" of Richard Stallman. HTTPS Everywhere HTTPS Everywhere is an extension that encrypts...

Server prefers weak encryption ciphers during TLS negotiation

TLS cipher suite issues were detected: Server prefers weak encryption ciphers during TLS negotiation...

CVE-2023-5552

CVE-2023-5552 describes a password-disclosure vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall 19.5 MR3 (19.5.3) and older, where a password type set to “Specified by sender” allows an attacker with full email access to decrypt PDFs. The issue is tied to SPX password hand...

CVE-2023-22113

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Code injection

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...