Lucene search
K

23 matches found

SUSE CVE
SUSE CVE
added 15 hours ago4 views

SUSE CVE-2026-46291

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hashdigestkey Use printhexdumpdevel for dumping sensitive HMAC key bytes in hashdigestkey to avoid leaking secrets at runtime when CONFIGDYNAMICDEBUG is enabled...

5.4AI score
Exploits0References2
Cvelist
Cvelist
added yesterday25 views

CVE-2026-46291 crypto: caam - guard HMAC key hex dumps in hash_digest_key

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hashdigestkey Use printhexdumpdevel for dumping sensitive HMAC key bytes in hashdigestkey to avoid leaking secrets at runtime when CONFIGDYNAMICDEBUG is enabled...

Exploits0References5
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-46291

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hashdigestkey Use printhexdumpdevel for dumping sensitive HMAC key bytes in hashdigestkey to avoid leaking secrets at runtime when CONFIGDYNAMICDEBUG is enabled...

5.4AI score
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added yesterday5 views

PT-2026-47363

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash digest key Use print hex dump devel for dumping sensitive HMAC key bytes in hash digest key to avoid leaking secrets at runtime when CONFIG DYNAMIC DEBUG is enabled...

5.4AI score
Exploits0References6
RedhatCVE
RedhatCVE
added 4 days ago4 views

CVE-2026-5085

Solstice::Session versions through 1440 for Perl generates session ids insecurely. The generateSessionID method returns an MD5 digest seeded by the epoch time, a random hash reference, a call to the built-in rand function and the process id. The same method is used in the generateID method in...

9.1CVSS5.5AI score0.00045EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/05/28 3:54 a.m.6 views

SUSE CVE-2026-46033

In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject short ahash digests during instance creation authencesn requires either a zero authsize or an authsize of at least 4 bytes because the ESN encrypt/decrypt paths always move 4 bytes of high-order sequen...

5.8AI score0.00032EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/27 12:56 p.m.7 views

EUVD-2026-32414

In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject short ahash digests during instance creation authencesn requires either a zero authsize or an authsize of at least 4 bytes because the ESN encrypt/decrypt paths always move 4 bytes of high-order sequen...

5.8AI score0.00032EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.6 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of verification of the hash digest length during the creation of authentication instance...

5.8AI score0.00032EPSS
Exploits0References5
CVE
CVE
added 2026/04/13 6:56 a.m.4 views

CVE-2026-5085

CVE-2026-5085 affects Solstice::Session (Perl) versions through 1440. The root cause is insecure session ID generation in _generateSessionID (and _generateID in Solstice::Subsession), which uses an MD5 digest seeded by the epoch time, a random hash reference, the built-in rand() (seeded with 16 b...

9.1CVSS5.7AI score0.00045EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.3 views

PT-2026-1251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's crypto subsystem, specifically within the starfive implementation. The sg nents for len function's return value was incorrectly assigned to an unsigne...

4.6CVSS6.4AI score0.00025EPSS
Exploits0
OSV
OSV
added 2025/10/24 11:15 p.m.0 views

UBUNTU-CVE-2025-12194

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules, Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All API modules allows Excessive Allocation. This vulnerability is associated wi...

5.9CVSS5.8AI score0.00025EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-10940

Malware in sbrugna...

9.8CVSS9.4AI score0.00171EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/12/03 12:16 a.m.1 views

SUSE CVE-2024-53106

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

5.5CVSS7.8AI score0.0002EPSS
Exploits0References13
OSV
OSV
added 2024/12/02 2:15 p.m.1 views

DEBIAN-CVE-2024-53106

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

7.8CVSS6.2AI score0.0002EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/02 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a buffer overflow due to the use of HASHALGOLAST in the imaeventdigestinitcommon function in the ima...

7.8CVSS7.3AI score0.0002EPSS
Exploits0References5
Code423n4
Code423n4
added 2023/07/28 12:0 a.m.6 views

_getSelector does not return the right selector

Lines of code Vulnerability details Impact getSelector... function in the CoreVoting.sol will NEVER return the correct function selector of a calldata string. This can lead to malfunction in the system when creating a proposal. Proof of Concept The function selector is suppose to be the hash dige...

6.7AI score
Exploits0
OSV
OSV
added 2021/07/09 7:15 p.m.1 views

CVE-2021-24020

A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed URLs by appending further data which allows bypass of signature verification...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2021/07/09 7:15 p.m.10 views

CVE-2021-24020

A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed URLs by appending further data which allows bypass of signature verification...

9.8CVSS0.00171EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/07/09 6:17 p.m.12 views

CVE-2021-24020

A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed URLs by appending further data which allows bypass of signature verification...

7.5CVSS9.7AI score0.00171EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2021/07/09 6:17 p.m.1 views

CVE-2021-24020

A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed URLs by appending further data which allows bypass of signature verification...

7.5CVSS5.5AI score0.00171EPSS
Exploits0References1
Rows per page
Query Builder