Lucene search
K

65 matches found

NVD
NVD
added 2026/04/06 8:16 p.m.5 views

CVE-2026-35199

SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...

6.1CVSS0.00281EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/06 7:44 p.m.6 views

CVE-2026-35199

SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...

6.1CVSS6.1AI score0.00281EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/04/06 7:44 p.m.10 views

EUVD-2026-19472

SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...

6.1CVSS6.1AI score0.00281EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.6 views

PT-2026-30723

SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...

6.1CVSS6.1AI score0.00281EPSS
Exploits0References2
OSV
OSV
added 2025/12/02 3:15 p.m.4 views

CVE-2025-59705

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01...

6.8CVSS5.8AI score0.00657EPSS
Exploits8References2
NVD
NVD
added 2025/12/02 3:15 p.m.3 views

CVE-2025-59702

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components...

7.2CVSS0.0026EPSS
Exploits1References2
CVE
CVE
added 2025/12/02 12:0 a.m.6 views

CVE-2025-59699

Entrust nShield Connect XC (up to 13.6.11), nShield 5c (up to 13.6.11), and nShield HSMi (up to 13.6.11) and nShield Connect XC/HSMi 13.7 are affected by CVE-2025-59699. A physically proximate attacker can escalate privileges by booting from a USB device containing a valid root filesystem, due to...

6.8CVSS6.7AI score0.00272EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.5 views

PT-2025-48693

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to modify or erase tamper events via the Chassis management board...

6.9AI score0.00196EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.4 views

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from physical proximity where an attacker can boot from a USB device to elevate privileges...

6.8CVSS6.5AI score0.00272EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.4 views

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker with elevated privileges can read and write the contents of an unencrypted Appliance SSD...

4.1CVSS6.4AI score0.00157EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.2 views

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in the Entrust nShield Connect XC that originates from a physical neighbor attacker having untraceable access to internal components of the device...

9.1CVSS6.4AI score0.00368EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.4 views

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates in a physical neighbor attacker who can enable the USB port by inserting a chassis probe to elevate privileges during system...

6.8CVSS6.5AI score0.00253EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/10/31 12:0 a.m.6 views

F5 Networks F5OS-A FIPS HSM Information Disclosure (K000148625)

The version of F5 Networks F5OS-A installed on the remote host is affected by a vulnerability as referenced in the K000148625 advisory. - A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module HSM...

5.6CVSS5.6AI score0.00113EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/16 4:1 p.m.4 views

CVE-2025-53860

A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module HSM information on F5 rSeries systems. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

5.6CVSS6.4AI score0.00113EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/16 2:52 p.m.4 views

CVE-2025-60013

When a user attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, the FIPS hardware security module HSM may fail to initialize. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

6.7CVSS7AI score0.00172EPSS
Exploits0References1
NVD
NVD
added 2025/10/15 4:15 p.m.4 views

CVE-2025-53860

A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module HSM information on F5 rSeries systems. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

5.6CVSS0.00113EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/15 3:30 p.m.3 views

EUVD-2025-34635

When a user attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, the FIPS hardware security module HSM may fail to initialize. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

5.7CVSS6.4AI score0.00172EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/15 3:15 p.m.4 views

CVE-2025-53860 F5OS-A FIPS HSM vulnerability

A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module HSM information on F5 rSeries systems. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

5.6CVSS6AI score0.00113EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/15 3:15 p.m.9 views

CVE-2025-53860 F5OS-A FIPS HSM vulnerability

A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module HSM information on F5 rSeries systems. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

5.6CVSS0.00113EPSS
Exploits0References1
CVE
CVE
added 2025/10/15 3:15 p.m.22 views

CVE-2025-53860

The CVE-2025-53860 issue affects F5OS-A software on F5 rSeries appliances. A highly privileged authenticated attacker can read sensitive FIPS HSM information via the vulnerable components, with impact limited to control-plane exposure and no data-plane exposure reported. Affected versions include...

5.6CVSS6AI score0.00113EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder