8078 matches found
openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...
CVE-2026-53434 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-4X29-79GH-6V8Q vulnerabilities
Vulnerabilities for packages: hadoop-fips...
wolfssl
wolfSSL Embedded SSL/TLS Library The wolfSSL embedded SSL library formerly CyaSSL is a lightweight SSL/TLS library written in ANSI C and targeted for embedded, RTOS, and resource-constrained environments - primarily because of its small size, speed, and feature set. It is commonly used in standar...
GHSA-27R3-JXMH-P828 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, json-server, arangodb, pelias-api, tileserver-gl, thingsboard, argo-workflows, gemini-cli, tileserver-gl-fips, kubescape-grype-offline-db...
GHSA-W74X-V6F9-J3XG vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, serve, tileserver-gl, arangodb...
CVE-2026-111181 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, json-server, arangodb, pelias-api, tileserver-gl, thingsboard, argo-workflows, gemini-cli, tileserver-gl-fips, kubescape-grype-offline-db...
GHSA-333X-W4R6-6CRP vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, serve, tileserver-gl, arangodb...
GHSA-WJR9-J795-JXCR vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, serve, tileserver-gl, arangodb...
GHSA-XHQ7-XMQJ-769H vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, serve, tileserver-gl, arangodb...
CVE-2026-110180 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, serve, tileserver-gl, arangodb...
CVE-2026-110095 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, serve, tileserver-gl, arangodb...
CVE-2026-110306 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, serve, tileserver-gl, arangodb...
CVE-2026-110725 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, serve, tileserver-gl, arangodb...
Scalar-Venom-Attack
This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...
deluded-openssl-3.2.0
Welcome to the OpenSSL Project !openssl logo !github actions ci badgegithub actions ci !appveyor badgeappveyor jobs OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the TLS formerly SSL, DTLS and QUIC currently client side only protocols. The protocol implementations a...
CVE-2026-114437 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui-fips, crossplane-cli, policy-controller-fips, gitsign, mariadb-operator-fips, slsa-verifier, step-issuer-fips, redpanda-operator, cortex-fips, step-ca-fips, zitadel, chainloop-control-plane, cosign-fips, step-ca, sloth-fips, pyrra-fips,...
GHSA-J6QF-3M9C-VWJ3 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui-fips, crossplane-cli, policy-controller-fips, gitsign, mariadb-operator-fips, slsa-verifier, step-issuer-fips, redpanda-operator, cortex-fips, step-ca-fips, zitadel, chainloop-control-plane, cosign-fips, step-ca, sloth-fips, pyrra-fips,...
SymCrypt-OpenSSL
SCOSSL - The SymCrypt engine and provider for OpenSSL The SymCrypt engine and provider for OpenSSL SCOSSL allow the use of OpenSSL with SymCrypt as the provider for core cryptographic operations. The primary motivation for this is to support FIPS certification, as vanilla OpenSSL 1.1.1 does not...