2026 matches found
EUVD-2021-7985
Malicious code in bioql PyPI...
EUVD-2023-52123
Malicious code in bioql PyPI...
EUVD-2025-25385
Malicious code in bioql PyPI...
EUVD-2023-12414
Malicious code in bioql PyPI...
EUVD-2022-48978
Malicious code in bioql PyPI...
EUVD-2024-54868
Malicious code in bioql PyPI...
EUVD-2025-23364
Malicious code in bioql PyPI...
EUVD-2024-52266
Malicious code in bioql PyPI...
EUVD-2024-41406
Malicious code in bioql PyPI...
EUVD-2022-24585
Malicious code in bioql PyPI...
MetaCPAN Crypt::RandomEncryption security vulnerability
MetaCPAN Crypt::RandomEncryption is a Perl library from the MetaCPAN Foundation. A security vulnerability exists in MetaCPAN Crypt::RandomEncryption version 0.01, which stems from the use of an insecure rand function for encryption, which may result in insufficient encryption strength...
PERCo-Web Weak Encryption Disclosure
The vulnerability of the PERCo-Web access control system is related to the use of a weak encryption algorithm. Exploiting this vulnerability could allow an attacker, operating remotely, to obtain user authentication data...
PT-2025-55106
Уязвимость системы контроля доступа PERCo-Web связана с использованием слабого алгоритма шифрования. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть аутентификационные данные пользователя...
Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses pyjwt v2.10.1 library which is vulnerable to CVE-2025-45768
Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses pyjwt v2.10.1 library which is vulnerable to CVE-2025-45768. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-45768 DESCRIPTION: pyjwt v2.10.1 was...
Security Bulletin: IBM Watsonx BI is affected by use of jose v6.0.10 and was discovered to contain weak encryption
Summary IBM Watsonx BI is affected by use of jose v6.0.10 where the library uses a weak encryption algorithm, allowing an attacker to decrypt sensitive data Vulnerability Details CVEID:CVE-2025-45767 DESCRIPTION: jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a...
CVE-2025-57176
On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption metadata only with file contents...
CVE-2025-57176
On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption metadata only with file contents...
CVE-2025-57176
On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption metadata only with file contents...
Security Bulletin: Astronomer with IBM is vulnerable to weak encryption due to the jose package (CVE-2025-45767)
Summary Jose is used by Astronomer with IBM as part of the JSON encryption functionality. Vulnerability Details CVEID:CVE-2025-45767 DESCRIPTION: jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security...
pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).
...