Lucene search
+L

5 matches found

OSV
OSV
•added 2026/07/14 9:41 p.m.•17 views

JLSEC-2026-747 PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity...

PKCS12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. The PKCS12 verify path compared the locally computed HMAC against the MAC parsed from the PKCS12 structure using a length taken directly fr...

6.5CVSS5.9AI score0.00213EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/25 9:02 p.m.•15 views

CVE-2026-6329 PKCS#12 MAC verification uses attacker-controlled comparison length

PKCS12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. The PKCS12 verify path compared the locally computed HMAC against the MAC parsed from the PKCS12 structure using a length taken directly fr...

6CVSS5.9AI score0.00213EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/06/25 9:02 p.m.•44 views

CVE-2026-6329

PKCS12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. The PKCS12 verify path compared the locally computed HMAC against the MAC parsed from the PKCS12 structure using a length taken directly fr...

6.5CVSS5.9AI score0.00213EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•9 views

EulerOS Virtualization 2.13.0 : krb5 (EulerOS-SA-2025-2582)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesse...

5.9CVSS6.8AI score0.00345EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/08/06 5:15 p.m.•8 views

CVE-2020-7817

MyBrowserPlus downloads the files needed to run the program through the setup file Setup.inf. At this time, there is a vulnerability in downloading arbitrary files due to insufficient integrity verification of the files...

7.8CVSS7.5AI score0.0028EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder