59455 matches found
CVE-2026-74877
opensslencrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revokekey method that allows authenticated clients to revoke any other client's key. Attackers can revoke arbitrary keys by providing a valid ML-DSA signature, bypassing the intended ownership...
EUVD-2026-60096
opensslencrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revokekey method that allows authenticated clients to revoke any other client's key. Attackers can revoke arbitrary keys by providing a valid ML-DSA signature, bypassing the intended ownership...
CVE-2026-74876 openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption
opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...
CVE-2026-74877
openssl_encrypt versions before 1.4.0 contain a missing ownership verification flaw in the revoke_key method (keyserver/service.py, lines 195–270). The method accepts a client_id parameter but never verifies it matches key.owner_client_id, allowing any authenticated client to revoke another clien...
CVE-2026-74876 openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption
opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...
CVE-2026-74871
opensslencrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password...
CVE-2026-74871 openssl_encrypt before 1.4.6 KDF Bypass via Sequential-XOR
opensslencrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password...
CVE-2026-74871
opensslencrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password...
EUVD-2026-60090
opensslencrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password...
CVE-2026-74799 SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure
SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authentication when --mode flag is not set to exactly prod. Attackers can access /debug/pprof/heap and related endpoints to extract in-memory secrets including AccessAuthCode and AI provider...
CVE-2026-74799
SiYuan (note-taking app) before version 3.7.4 registers Go net/http/pprof debug endpoints (e.g., /debug/pprof/heap, goroutine dumps) without authentication whenever the --mode flag is not exactly prod. An unauthenticated network attacker can request these endpoints to extract in-memory secrets, i...
python-cryptography: python-cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
A flaw was found in cryptography, a Python package for cryptographic primitives. This vulnerability, known as a Bleichenbacher oracle, arises during PKCS7 EnvelopedData decryption. An attacker can exploit distinguishable error messages and timing differences during decryption to gain information...
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX X9.42 peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This...
CVE-2026-49304
Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability...
golang-fips: Golang FIPS zeroed buffer
A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...
CVE-2026-49304
Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49304
Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49304
CVE-2026-49304 describes a permission control vulnerability in the device key management module with an availability impact. The CVSS 3.1 base score is 6.2 (Medium) with LOCAL attack vector, LOW attack complexity, NO privileges required, and NO user interaction; impact is limited to Availability ...