2698 matches found
CVE-1999-0007
Information from SSL-encrypted sessions via PKCS 1...
PT-2026-4955
Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 3.6 Description A type confusion issue exists in the signature verification of signed PKCS7 data. This occurs when an ASN1 TYPE union member is accessed without first validating the type, potentially leading to a...
PT-2026-4954
Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1, 3.0, 3.3, 3.4, and 3.5 OpenSSL versions 3.6 through 3.6.0 Description An invalid or NULL pointer dereference can occur in applications processing malformed PKCS12 files. This can lead to a denial of service when an...
[SECURITY] Fedora 42 Update: gnutls-3.8.11-1.fc42
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
[SECURITY] Fedora 43 Update: gnutls-3.8.11-1.fc43
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
JLSEC-2025-233 Padding oracle through timing of cipher error reporting
Vulnerability In symmetric encryption modes that involve padding, if an attacker can submit ciphertexts for decryption and learn whether the padding is valid, this provides partial information about the plaintext. If the attacker can also submit input that the victim encrypts together with a...
TencentOS Server 4: openssh (TSSA-2024:0950)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0950 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: Move NSS DB password hash away from SHA-1 Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has read as many bytes as each length field indicates Update to NSS 3.112.1: restore support for finding...
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: Move NSS DB password hash away from SHA-1. Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has read as many bytes as each length field indicates Update to NSS 3.112.1: restore support for finding...
python-cryptography security update
An update is available for python-cryptography. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programmin...
RockyLinux 9 : python-cryptography (RLSA-2025:15874)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:15874 advisory. python-cryptography: NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Tenable has extracted the preceding description block directly from the...
EUVD-2016-9065
Malware in sbrugna...
EUVD-2018-8005
Malware in sbrugna...
EUVD-2018-8007
Malware in sbrugna...
EUVD-2018-8006
Malware in sbrugna...
EUVD-2020-13729
Malware in sbrugna...
EUVD-2006-5469
Malware in sbrugna...
EUVD-2006-4327
Malware in sbrugna...