Lucene search
+L

8896 matches found

CVE
CVE
added 2026/04/10 9:22 a.m.22 views

CVE-2021-47961

The CVE describes a plaintext password storage vulnerability in Synology SSL VPN Client prior to version 1.4.5-0684 . The insecure storage can allow remote attackers to access or influence the user’s PIN, potentially enabling unauthorized VPN configuration and interception of subsequent VPN traff...

8.1CVSS5.9AI score0.00322EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/10 9:22 a.m.3 views

CVE-2021-47961

A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combin...

8.1CVSS5.9AI score0.00322EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/10 12:30 a.m.10 views

EUVD-2026-21235

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS5.9AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/10 12:08 a.m.27 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value via the PKCS7 CBC decryption process. An attacker can recover plaintext data by sending repeated decryption queries with modified ciphertext, exploiting improper validation of interior paddin...

6.3CVSS5.8AI score0.00111EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.17 views

Synology SSL VPN Client 安全漏洞

The Synology SSL VPN Client is a VPN client software developed by Synology, a Chinese company, used for secure connection to Synology NAS devices. Versions of the Synology SSL VPN Client prior to 1.4.5-0684 contained security vulnerabilities. These vulnerabilities stemmed from improper storage of...

8.1CVSS5.8AI score0.00322EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.18 views

PT-2026-31906

Name of the Vulnerable Software and Affected Versions Synology SSL VPN Client versions prior to 1.4.5-0684 Description A security issue exists in Synology SSL VPN Client that allows remote attackers to access or influence a user's PIN code due to insecure storage. This could lead to unauthorized...

9.4CVSS5.9AI score0.00322EPSS
SaveExploits0References7
OSV
OSV
added 2026/04/09 11:17 p.m.26 views

DEBIAN-CVE-2026-5504

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

5.3CVSS5.3AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/09 11:17 p.m.12 views

CVE-2026-5504

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS0.00111EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/04/09 11:17 p.m.11 views

CVE-2026-5504

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS5.8AI score0.00111EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/09 11:17 p.m.15 views

UBUNTU-CVE-2026-5504

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS5.8AI score0.00111EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/09 10:33 p.m.6 views

CVE-2026-5504

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS5.9AI score0.00111EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/09 10:33 p.m.36 views

CVE-2026-5504 PKCS7 CBC Padding Oracle — Plaintext Recovery

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS0.00111EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/09 10:33 p.m.8 views

CVE-2026-5504 PKCS7 CBC Padding Oracle — Plaintext Recovery

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS6.1AI score
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/04/09 10:33 p.m.29 views

CVE-2026-5504

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS5.3AI score0.00111EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/04/09 10:33 p.m.8 views

CVE-2026-5504 PKCS7 CBC Padding Oracle — Plaintext Recovery

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS5.8AI score0.00111EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/09 10:33 p.m.40 views

CVE-2026-5504

CVE-2026-5504 affects wolfSSL’s PKCS7 CBC decryption. A padding oracle could enable plaintext recovery via repeated decryption queries with modified ciphertext; earlier wolfSSL versions did not validate interior padding bytes. The Connected documents confirm this is a padding oracle vulnerability...

6.3CVSS5.9AI score0.00111EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2026/04/09 10:33 p.m.25 views

CVE-2026-5504

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated...

6.3CVSS5.3AI score0.00111EPSS
SaveExploits0
EUVD
EUVD
added 2026/04/09 9:31 p.m.10 views

EUVD-2026-21041

OpenPLCV3 is vulnerable to a Plaintext Storage of a Password vulnerability that could allow an attacker to retrieve credentials and access sensitive information...

9.2CVSS5.9AI score0.00297EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/09 7:16 p.m.10 views

CVE-2026-35556

OpenPLCV3 is vulnerable to a Plaintext Storage of a Password vulnerability that could allow an attacker to retrieve credentials and access sensitive information...

9.2CVSS0.00297EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/09 6:57 p.m.5 views

CVE-2026-35556 Plaintext storage of a password in OpenPLC_V3

OpenPLCV3 is vulnerable to a Plaintext Storage of a Password vulnerability that could allow an attacker to retrieve credentials and access sensitive information...

9.2CVSS5.8AI score0.00297EPSS
SaveExploits0References1
Rows per page
Query Builder