207 matches found
CVE-2026-0460
Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity...
CVE-2026-0460
A cryptographic vulnerability in AMD Bootgen (CVE-2026-0460) involves improper authentication that could lead to the use of a fixed salt value for RSA padding instead of a randomly generated salt. This flaw potentially impacts data integrity . While the vulnerability is documented, specific explo...
CVE-2026-0460
Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity...
EUVD-2026-124634
Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity...
PT-2026-146015
Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity...
CVE-2026-0460: AMD Bootgen: Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly…
Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity...
Cryptographic Vulnerability in AMD Bootgen
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0460| Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity.| 1.0...
DigitalBazaar Forge encryption issue vulnerability
Versions of DigitalBazaar Forge prior to 1.4.1 contain an encryption-related vulnerability. This vulnerability arises because in the processing of certificate.verifychild, verifySignature, and lib/x509.js, RSA padding and RSASSA-PSS parameters are selected from the issuer’s certificate rather tha...
NuGet Package 'Amazon.Extensions.S3.Encryption' 2.1.x <= 2.3.0 / 3.x < 3.2.2 / 4.0.x < 4.0.3 RSA Padding Oracle
The version of the NuGet Package 'Amazon.Extensions.S3.Encryption' Amazon S3 Encryption Client for .NET installed on the remote host is 2.x greater than or equal to 2.1.0, or 3.x prior to 3.2.2, or 4.0.x prior to 4.0.3. It is, therefore, affected by a padding oracle vulnerability. A remote user w...
Security Bulletin: Investigation Assistant App for IBM QRadar SIEM contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Investigation Assistant App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION:...
CVE-2026-60007
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's Basic128Rsa15-encrypted username token to use repeated unauthenticated...
CVE-2026-60007
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's Basic128Rsa15-encrypted username token to use repeated unauthenticated...
CVE-2026-69247 cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which...
PT-2026-55972
Name of the Vulnerable Software and Affected Versions OP-TEE versions 4.5.0 through 4.10.x Description The RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses a non-constant-time memcmp function for label hash verification and contains multiple distinguishable error paths...
Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding
Summary Configuring encrypt:rsa:algorithm=OAEP does not enable OAEP encryption. Due to an incorrect BouncyCastle transformation string, the OAEP setting selects PKCS1 v1.5, which is the same algorithm as the DEFAULT setting. Impact Operators who configure encrypt:rsa:algorithm=OAEP to obtain...
GHSA-4J9M-H44M-2HV8 Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding
Summary Configuring encrypt:rsa:algorithm=OAEP does not enable OAEP encryption. Due to an incorrect BouncyCastle transformation string, the OAEP setting selects PKCS1 v1.5, which is the same algorithm as the DEFAULT setting. Impact Operators who configure encrypt:rsa:algorithm=OAEP to obtain...
sslpwn
sslpwn sslpwn is a security research tool for testing web app...
CVE-2026-50268 Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Encryption 4.0.0 through 4.1.0, configuring encrypt:rsa:algorithm=OAEP does not enable OAEP encryption. Due to an incorrect BouncyCastle...
Timing Attack
Overview web-token/jwt-framework is a JSON Object Signing and Encryption library for PHP and Symfony Bundle. Affected versions of this package are vulnerable to Timing Attack via RSAES-PKCS1-v15 decryption in RSACrypt::decryptWithRSA15. An attacker can recover encrypted content-encryption keys by...
Linux Distros Unpatched Vulnerability : CVE-2026-33662
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...