The vulnerability of the cipher_update_inplace() function in the openssl/src/cipher_ctx.rs module of the OpenSSL library allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the cipherupdateinplace function in the openssl/src/cipherctx.rs module of the OpenSSL library is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:4037-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4037-1 advisory. This update for openssl-11-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788...

The vulnerability of the functions raw_client_psk(), raw_server_psk(), raw_cookie_generate(), and raw_stateless_cookie_generate() in the OpenSSL library’s src/ssl/callbacks.rs module allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the functions rawclientpsk, rawserverpsk, rawcookiegenerate, and rawstatelesscookiegenerate in the OpenSSL library’s src/ssl/callbacks.rs module is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to...

EulerOS Virtualization 2.10.1 : openssl (EulerOS-SA-2026-3844)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:4034-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4034-1 advisory. This update for openssl-11-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4038-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4038-1 advisory. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4040-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4040-1 advisory. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap...

SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2026:4033-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4033-1 advisory. August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072:...

SUSE SLED15: libopenssl-1_1-devel / libopenssl1_1 / libopenssl1_1-32bit / etc (SUSE-SU-2026:4041-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4041-1 advisory. August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4032-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4032-1 advisory. August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072:...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:4042-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4042-1 advisory. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - HollowByte: DoS vector against OpenSSL TLS ClientHello via remot...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:4039-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4039-1 advisory. August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue bsc127479...

CVE-2017-3730

CVE-2017-3730 OpenSSL CVE-2017-3730 概念実証 OpenSSH をプロキシとして使用し、DH 値をその場でパッチする DHE-PSK-WITH-AES-256-GCM-SHA384 のような暗号スイートを使用して SSL サーバーを作成します。ここでは 10.0.2.2 のポート 8899 で実行するとします。 openssh-7.4p1 を取得します パッチを適用します ビルドします 次のように実行します: root@kitploit: ./ssh -vvv -N -D 1085 -o TCPKeepAlive=yes -o...

OESA-2026-3923 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...

OESA-2026-3922 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...

CVE-2026-93964

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

CVE-2026-93964

CVE-2026-93964 affects nginx-proxy-manager up to version 2.15.1 . The vulnerability exists in the internalCertificate.validate function within backend/internal/certificate.js (component: Validate Route). The root cause is a missing authentication check , allowing a remote, unauthenticated attacke...

CVE-2026-93964 NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

EUVD-2026-83653

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

CVE-2026-93964 NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...