Lucene search
K

36 matches found

SUSE CVE
SUSE CVE
added last week3 views

SUSE CVE-2026-45988

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix re-decryption of RESPONSE packets If a RESPONSE packet gets a temporary failure during processing, it may end up in a partially decrypted state - and then get requeued for a retry. Fix this by just discarding the packe...

5.8AI score0.0006EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/05/27 12:0 a.m.2 views

CVE-2026-45988

rxrpc: Fix re-decryption of RESPONSE packets...

9.8CVSS5.8AI score0.0006EPSS
Exploits0References2
NVD
NVD
added 2025/12/22 11:15 a.m.1 views

CVE-2025-61739

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets...

7.2CVSS0.00025EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/22 10:19 a.m.2 views

EUVD-2025-204703

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets...

7.2CVSS6.4AI score0.00025EPSS
Exploits0References3
CVE
CVE
added 2025/12/22 10:19 a.m.15 views

CVE-2025-61739

CVE-2025-61739 concerns nonce reuse that enables a replay attack or decryption of captured packets. Documents identify the affected products as Johnson Controls IQ Panels2, IQ Panels2+, IQHub, IQPanel 4, and PowerG, with the issue rooted in nonce reuse and/or weak RNG affecting confidentiality an...

7.2CVSS6.5AI score0.00025EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.1 views

Johnson Controls IQ series和Johnson Controls PowerG 安全漏洞

The Johnson Controls IQ series and Johnson Controls PowerG are both products of Johnson Controls, Inc.The Johnson Controls IQ series is a series of intelligent security and automation control platforms.The Johnson Johnson Controls PowerG is a communications device. A security vulnerability exists...

7.2CVSS6.6AI score0.00025EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-2533

Malware in sbrugna...

5CVSS6.1AI score0.01476EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-17564

Malware in sbrugna...

7.5CVSS7.6AI score0.00136EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-5207

Malware in sbrugna...

6.8CVSS6.4AI score0.00889EPSS
Exploits2References9
NVD
NVD
added 2025/09/26 1:15 a.m.5 views

CVE-2025-60250

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...

4.7CVSS0.00022EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/21 11:1 p.m.10 views

CVE-2008-5230

The Temporal Key Integrity Protocol TKIP implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packet...

6.8CVSS7AI score0.00889EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2024/10/01 12:0 a.m.21 views

Synology DiskStation Manager Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2022-27624)

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packet decryption functionality of Out-of-Band OOB Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology...

10CVSS8.8AI score0.01074EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:53 a.m.1 views

SUSE CVE-2020-26141

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check authenticity of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the...

4.2CVSS9.6AI score0.00236EPSS
Exploits0References30
Cvelist
Cvelist
added 2022/10/20 5:50 a.m.11 views

CVE-2022-27624

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packet decryption functionality of Out-of-Band OOB Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology...

10CVSS10AI score0.01074EPSS
Exploits0References1
CVE
CVE
added 2022/10/20 5:50 a.m.70 views

CVE-2022-27624

CVE-2022-27624 affects Synology DiskStation Manager (DSM) on DS3622xs+, FS3410, and HD6500, with DSM versions before 7.1.1-42962-2. The issue is an out-of-bounds operation in the OOB (Out-of-Band) Management packet decryption that can allow remote attackers to execute arbitrary commands over the ...

10CVSS9.7AI score0.01074EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/10/20 12:0 a.m.1 views

Synology DiskStation Manager 缓冲区错误漏洞

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology, a Chinese company. The operating system manages information such as data, files, photos, music, etc. The operating system is not compatible with Synology DiskStation Manager DSM. A buffer...

10CVSS8.8AI score0.01074EPSS
Exploits0References3
The Hacker News
The Hacker News
added 2020/02/26 6:15 p.m.331 views

New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices

Cybersecurity researchers today uncovered a new high-severity hardware vulnerability residing in the widely-used Wi-Fi chips manufactured by Broadcom and Cypress—apparently powering over a billion devices, including smartphones, tablets, laptops, routers, and IoT gadgets. Dubbed 'Kr00k' and track...

3.1CVSS5.9AI score0.08412EPSS
Exploits7
Lenovo
Lenovo
added 2018/12/18 3:12 p.m.31 views

WPA2 Protocol Vulnerabilities - Lenovo Support US

No description provided...

7.4CVSS7.1AI score0.00469EPSS
Exploits0
NVD
NVD
added 2018/02/05 4:29 a.m.10 views

CVE-2018-5797

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smintencrypt Hardcoded AES Key that can be used for packet decryption obtaining cleartext credentials by an attacker who has access to a wired port...

7.5CVSS7.5AI score0.00136EPSS
Exploits0References1
Prion
Prion
added 2018/02/05 4:29 a.m.9 views

Hardcoded credentials

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smintencrypt Hardcoded AES Key that can be used for packet decryption obtaining cleartext credentials by an attacker who has access to a wired port...

3.3CVSS7.5AI score0.00136EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder