CVE-2026-46395

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the hmacBase64 function in the HAXcms Node.js backend contains two critical cryptographic implementation errors that together allow any unauthenticated attacker to extract the system’s private signing ke...

EUVD-2026-34886

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the hmacBase64 function in the HAXcms Node.js backend contains two critical cryptographic implementation errors that together allow any unauthenticated attacker to extract the system’s private signing ke...

Clevo UEFI 安全漏洞

Clevo UEFI is a firmware interface from Blue Sky Computer Clevo of Taiwan, China. A security vulnerability exists in Clevo UEFI that stems from the inclusion of a private signing key in firmware update packages, which could lead to malicious firmware being trusted...

SUSE CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

CVE-2021-27389

A vulnerability has been identified in Opcenter Quality All versions V12.2, QMS Automotive All versions V12.30. A private sign key is shipped with the product without adequate protection...

Siemens Digital Industries Software Opcenter Quality 安全漏洞

Opcenter Quality formerly known as "CAQ=QSYS" is a quality management system QMS. A security vulnerability exists in Siemens Opcenter Quality. The vulnerability is due to the private signing key that comes with the product not being adequately protected. No details of the vulnerability are...

Siemens Opcenter Quality Private Data Exposure Vulnerability

Opcenter Quality formerly known as "CAQ=QSYS" is a quality management system QMS. A security vulnerability exists in Siemens Opcenter Quality. The vulnerability is due to the private signing key that comes with the product not being adequately protected. No details of the vulnerability are...