Lucene search
K

600 matches found

Tenable Nessus
Tenable Nessus
added 2025/06/06 12:0 a.m.5 views

SUSE SLES15 Security Update : python-cryptography (SUSE-SU-2025:01818-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01818-1 advisory. - CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as properties argument to either function...

3.7CVSS5.2AI score0.00426EPSS
Exploits0References4
OSV
OSV
added 2025/06/05 1:53 p.m.4 views

SUSE-SU-2025:01818-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as properties argument to either function bsc1242631...

3.7CVSS5.6AI score0.00426EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/05/30 12:0 a.m.8 views

SUSE SLED15 / SLES15 Security Update : python-cryptography (SUSE-SU-2025:01662-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01662-2 advisory. - CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as properties argume...

3.7CVSS5.2AI score0.00426EPSS
Exploits0References4
OSV
OSV
added 2025/05/29 1:31 p.m.2 views

SUSE-SU-2025:01662-2 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as properties argument to either function bsc1242631...

3.7CVSS5.6AI score0.00426EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2025/05/26 12:0 a.m.6 views

openSUSE Security Advisory (SUSE-SU-2025:01662-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.7CVSS4.3AI score0.00426EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/05/23 12:0 a.m.4 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-cryptography (SUSE-SU-2025:01662-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01662-1 advisory. - CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as...

3.7CVSS5.2AI score0.00426EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2025/05/22 4:4 p.m.1 views

Security update for python-cryptography

This update for python-cryptography fixes the following issues: CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as properties argument to either function bsc1242631. Patch Instructions: To install this SUSE update use the SUSE recommended installati...

6.3CVSS4.6AI score0.00426EPSS
Exploits0References4
OSV
OSV
added 2025/05/22 4:4 p.m.3 views

SUSE-SU-2025:01662-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as properties argument to either function bsc1242631...

3.7CVSS5.6AI score0.00426EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2025/05/19 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2025-1458)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.01118EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/05/19 12:0 a.m.3 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2025-1487)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.01118EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.7 views

Alibaba Cloud Linux 3 : 0083: python-cryptography (ALINUX3-SA-2022:0083)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0083 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-25659: python-cryptography 3.2 is...

9.1CVSS7.7AI score0.06718EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.11 views

Alibaba Cloud Linux 3 : 0274: python3.11-cryptography (ALINUX3-SA-2024:0274)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0274 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-23931: cryptography is a package...

7.5CVSS6.6AI score0.01301EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.9 views

Alibaba Cloud Linux 3 : 0061: python-cryptography (ALINUX3-SA-2024:0061)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0061 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-23931: cryptography is a package designed ...

6.5CVSS6.8AI score0.01301EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 2:20 a.m.71 views

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2023-42503 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of...

9.8CVSS9.5AI score0.07269EPSS
Exploits5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.5 views

The vulnerability of the Python RSA cryptographic library, which stems from the use of cryptographic algorithms with defects, allows a perpetrator to gain access to confidential data.

The vulnerability of the Python RSA cryptographic library is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...

7.8CVSS7.1AI score0.01359EPSS
Exploits1References9Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/28 10:38 a.m.14 views

Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2024-12797)

Summary IBM Security SOAR uses an older version of the Python cryptography/openssl library which has a known vulnerability. An update has been released which address this issue. It is recommended upgrading to Version 51.0.5.1 or later of IBM Security SOAR. Vulnerability Details CVEID:CVE-2024-127...

6.3CVSS6.8AI score0.02357EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2023-50782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key...

7.5CVSS6.2AI score0.01118EPSS
Exploits0References3
OSV
OSV
added 2025/02/21 1:36 p.m.4 views

OESA-2025-1163 python-jwcrypto security update

Implements JWK, JWS, JWE specifications with python-cryptography Security Fixes: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can cause a denial of service attack by passing in a malicious JWE Token with a high compression...

6.8CVSS6.8AI score0.0098EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2025/02/18 12:0 a.m.12 views

Mageia: Security Advisory (MGASA-2025-0069)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.02454EPSS
Exploits1References6
OSV
OSV
added 2025/02/17 6:37 p.m.20 views

MGASA-2025-0069 Updated python-cryptography & openssl packages fix security vulnerabilities

Cryptography vulnerable to NULL-dereference when loading PKCS7 certificates. CVE-2023-49083 Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659. CVE-2023-50782 Cryptography NULL pointer deference with pkcs12.serializekeyandcertificat...

7.5CVSS7.7AI score0.01118EPSS
Exploits1References5
Rows per page
Query Builder