Lucene search
+L

2757 matches found

NVD
NVD
added 5 hours ago4 views

CVE-2026-43823

When initializing an RSA public key from DER or PEM bytes throws an error, the EVPPKEY is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes...

7.5CVSS
SaveExploits0References1
Cvelist
Cvelist
added 6 hours ago7 views

CVE-2026-43823

When initializing an RSA public key from DER or PEM bytes throws an error, the EVPPKEY is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes...

SaveExploits0References1
EUVD
EUVD
added 6 hours ago2 views

EUVD-2026-48288

When initializing an RSA public key from DER or PEM bytes throws an error, the EVPPKEY is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes...

7.5CVSS5.4AI score
SaveExploits0References1
OSV
OSV
added 10 hours ago2 views

RHSA-2026:44062 Red Hat Security Advisory: pki-deps:10.6 security update

Bulletin has no description...

8.1CVSS6.8AI score0.00695EPSS
SaveExploits1References20
OSV
OSV
added 14 hours ago5 views

RLSA-2026:43400 Important: dogtag-pki security update

IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: Certificate Authority CA Key Recovery Authority KRA Online Certificate Status Protocol OCSP Manager Token Key Service TKS Token Processing...

8.1CVSS8AI score0.00695EPSS
SaveExploits1References3
Rockylinux
Rockylinux
added yesterday4 views

pki-deps:10.6 security update

An update is available for module.slf4j, velocity, xml-commons-resolver, javassist, relaxngDatatype, module.glassfish-jaxb-api, slf4j, module.apache-commons-lang, xsom, module.bea-stax, module.apache-commons-collections, module.xalan-j2, glassfish-jaxb, xerces-j2, module.glassfish-fastinfoset,...

8.1CVSS8.1AI score0.00695EPSS
SaveExploits0
AlmaLinux
AlmaLinux
added yesterday4 views

Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution CVE-2026-54513 For more details about the security issues, including the impact, a CVS...

8.1CVSS8.1AI score0.00695EPSS
SaveExploits0References4
OSV
OSV
added yesterday2 views

ALSA-2026:43218 Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution CVE-2026-54513 For more details about the security issues, including the impact, a CVS...

8.1CVSS8.1AI score0.00695EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added yesterday4 views

RHEL 8 : pki-deps:10.6 (RHSA-2026:43218)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43218 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: jackson-databind:...

8.1CVSS8.2AI score0.00695EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2 days ago30 views

CVE-2026-59842 Libssh: libssh: information disclosure via short gssapi curve25519 public key

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

3.7CVSS0.00342EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2 days ago6 views

PT-2026-61857

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

3.7CVSS5.3AI score0.00342EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2 days ago8 views

PT-2026-63284

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description An authenticated user can cause a denial of service by submitting a specially crafted RFC 4716 SSH2 public key to the SSH key ingestion endpoint. The issue stems from a normalization function...

6.9CVSS5.2AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 3 days ago6 views

gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of...

5.3CVSS5.9AI score0.00727EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/16 2:35 p.m.9 views

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the...

10CVSS6.3AI score0.0044EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/16 2:35 p.m.6 views

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters

A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during...

7.5CVSS6.3AI score0.00415EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/14 9:41 p.m.5 views

JLSEC-2026-735 Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing...

Un-negotiated Raw Public Key RFC 7250 accepted in place of an X.509 certificate, bypassing chain validation. A raw public key has no chain, so ParseCertRelative accepts it without performing any trust verification; it must therefore only be accepted when RPK was actually negotiated for that peer...

8.2CVSS6.1AI score0.00145EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/14 9:41 p.m.6 views

JLSEC-2026-700 Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a...

Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65...

7.5CVSS6.1AI score0.00226EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/14 9:41 p.m.6 views

JLSEC-2026-754 The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing...

The PKCS7 decode path ignores the caller-supplied output buffer size outputSz, allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release...

5.3CVSS6.1AI score0.00256EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/14 8:47 p.m.4 views

openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without prope...

7.5CVSS7AI score0.00981EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/07/14 5:30 a.m.12 views

CVE-2026-50721

A flaw was found in Libreswan's implementation of IKEv1 authentication via raw RSA signatures. When processing an IKEv1 packet using PKCS 1 v1.5 RSA encryption, the RSAauthenticatehashsignaturerawrsa function fails to properly validate the length of the authentication hash. A remote,...

8.1CVSS6AI score0.00392EPSS
SaveExploits0References6
Rows per page
Query Builder