Lucene search
+L

199 matches found

EUVD
EUVD
added 2026/01/08 2:06 p.m.11 views

EUVD-2026-1033

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS6.3AI score0.00421EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/08 2:06 p.m.42 views

CVE-2026-21895 rsa crate has potential panic on a prime being equal to 1

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS0.00421EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/08 2:06 p.m.10 views

CVE-2026-21895 rsa crate has potential panic on a prime being equal to 1

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS6.4AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/08 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-21895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics...

6.9CVSS5.8AI score0.00421EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/01/06 6:14 p.m.14 views

rsa crate has potential panic on a prime being equal to 1

When creating a RSA private key from its components, the construction panics, instead of returning an error, when one of the primes is 1. Discovered by Christian Reitter from Radically Open Security during a security review for Proton AG...

6.9CVSS6.9AI score0.00421EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/01/06 6:14 p.m.14 views

GHSA-9C48-W39G-HM26 rsa crate has potential panic on a prime being equal to 1

When creating a RSA private key from its components, the construction panics, instead of returning an error, when one of the primes is 1. Discovered by Christian Reitter from Radically Open Security during a security review for Proton AG...

6.9CVSS6.8AI score0.00421EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/06 12:00 a.m.11 views

PT-2026-2125

Name of the Vulnerable Software and Affected Versions rsa crate versions prior to 0.9.10 Description The rsa crate, an RSA implementation written in rust, experiences a panic instead of returning an error during the creation of an RSA private key from its components when one of the prime numbers ...

6.9CVSS6.6AI score0.00421EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
added 2025/12/02 12:00 a.m.4 views

Ubuntu 25.04 / 25.10 : CRaC JDK 21 vulnerabilities (USN-7901-1)

The remote Ubuntu 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7901-1 advisory. Jinfeng Guo discovered that the Security component of CRaC JDK 21 did not correctly handle certain representations of encoded strings. An...

7.5CVSS7.4AI score0.00647EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/02 12:00 a.m.8 views

Ubuntu 25.10 : CRaC JDK 25 vulnerabilities (USN-7902-1)

The remote Ubuntu 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7902-1 advisory. Jinfeng Guo discovered that the Security component of CRaC JDK 25 did not correctly handle certain representations of encoded strings. An unauthenticated...

7.5CVSS7.4AI score0.00647EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/01 2:48 p.m.13 views

USN-7902-1 openjdk-25-crac vulnerabilities

Jinfeng Guo discovered that the Security component of CRaC JDK 25 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. CVE-2025-53057 Darius Bohni discovered that the JA...

7.5CVSS6.7AI score0.00647EPSS
SaveExploits0References4
Ubuntu
Ubuntu
added 2025/12/01 2:48 p.m.14 views

USN-7902-1: CRaC JDK 25 vulnerabilities

Jinfeng Guo discovered that the Security component of CRaC JDK 25 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. CVE-2025-53057 Darius Bohni discovered that the JA...

7.5CVSS7.4AI score0.00647EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2025/11/24 12:14 p.m.10 views

USN-7885-1: OpenJDK 21 vulnerabilities

Jinfeng Guo discovered that the Security component of OpenJDK 21 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. CVE-2025-53057 Darius Bohni discovered that the JAX...

7.5CVSS7.4AI score0.00647EPSS
SaveExploits0
OSV
OSV
added 2025/11/24 12:08 p.m.9 views

USN-7884-1 openjdk-25 vulnerabilities

Jinfeng Guo discovered that the Security component of OpenJDK 25 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. CVE-2025-53057 Darius Bohni discovered that the JAX...

7.5CVSS6.7AI score0.00647EPSS
SaveExploits0References4
Ubuntu
Ubuntu
added 2025/11/24 12:08 p.m.11 views

USN-7884-1: OpenJDK 25 vulnerabilities

Jinfeng Guo discovered that the Security component of OpenJDK 25 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. CVE-2025-53057 Darius Bohni discovered that the JAX...

7.5CVSS7.4AI score0.00647EPSS
SaveExploits0
Snyk
Snyk
added 2025/10/21 10:22 p.m.6 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation in the String.equals checks. An attacker can cause unauthorized modification of data by exploiting improper validation or manipulation of string data. Remediation A fix was pushed into the master branch but not...

6.3CVSS7.1AI score0.00363EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/10/21 10:22 p.m.6 views

Improper Input Validation

Overview org.graalvm.sdk:graal-sdk is a high-performance JDK distribution designed to accelerate the execution of applications written in Java and other JVM languages along with support for JavaScript, Ruby, Python, and a number of other popular languages. Affected versions of this package are...

6.3CVSS6.9AI score0.00363EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2010-5308

Malware in sbrugna...

9.3CVSS6.4AI score0.01121EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:00 a.m.3 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986879)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986879 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for sx controls For sx controls the semantics of the max field is not...

5.5CVSS6.3AI score0.00236EPSS
SaveExploits0References4
NVD
NVD
added 2025/10/06 5:16 p.m.11 views

CVE-2025-61766

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leadin...

6.5CVSS0.00351EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/06 5:16 p.m.18 views

UBUNTU-CVE-2025-61766

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leadin...

6.5CVSS5.8AI score0.00351EPSS
SaveExploits0References5
Rows per page
Query Builder