53300 matches found
SUSE-SU-2026:20655-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-26007: missing validation can lead to security issues for signature verification ECDSA and shared key negotiation ECDH bsc1258074...
CVE-2026-2746
SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails...
SUSE-SU-2026:20706-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-26007: missing validation can lead to security issues for signature verification ECDSA and shared key negotiation ECDH bsc1258074...
Dust Specter Targets Iraqi Officials with New SPLITDROP and GHOSTFORM Malware
A suspected Iran-nexus threat actor has been attributed to a campaign targeting government officials in Iraq by impersonating the country's Ministry of Foreign Affairs to deliver a set of never-before-seen malware. Zscaler ThreatLabz, which observed the activity in January 2026, is tracking the...
SUSE-SU-2026:20654-1 Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. bsc1257960 - Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in the current implementation where the binder...
EUVD-2026-9813
Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-28548
Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-28548
Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
RLSA-2026:3477 Moderate: gnutls security update
The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: Stack-based Buffer Overflow in gnutlspkcs11tokeninit Function CVE-2025-9820 gnutls: GnuTLS: Denial of Service vi...
gnutls security update
An update is available for gnutls. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnutls packages provide the GNU Transport Layer Security GnuTLS library,...
CVE-2026-28548
Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-28548
Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-28548
Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-28548
CVE-2026-28548 describes a vulnerability in an email application with improper verification. The impact is potential confidentiality compromise; exploitation is indicated as local with low attack complexity and user interaction required (per CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N). Specifi...
GHSA-9M84-WC28-W895 Ghost has incomplete CSRF protections around OTC use
Impact Incomplete CSRF protections around /session/verify made it possible to use OTCs in login sessions different from the requesting session. In some scenarios this might have made it easier for phishers to take over a Ghost site. Vulnerable versions This vulnerability is present in Ghost from...
Ghost has incomplete CSRF protections around OTC use
Impact Incomplete CSRF protections around /session/verify made it possible to use OTCs in login sessions different from the requesting session. In some scenarios this might have made it easier for phishers to take over a Ghost site. Vulnerable versions This vulnerability is present in Ghost from...
PT-2026-23431
Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-70231
D-Link DIR-513 version 1.10 contains a critical-level vulnerability. When processing POST requests related to verification codes in /goform/formLogin, it enters /goform/getAuthCode but fails to filter the value of the FILECODE parameter, resulting in a path traversal vulnerability...
SecureRAG-RTL: A Retrieval-Augmented, Multi-Agent, Zero-Shot LLM-Driven Framework for Hardware Vulnerability Detection
Large language models LLMs have shown remarkable capabilities in natural language processing tasks, yet their application in hardware security verification remains limited due to scarcity of publicly available hardware description language HDL datasets. This knowledge gap constrains LLM performan...