1386 matches found
UBUNTU-CVE-2026-14663
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...
EUVD-2026-57832
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...
CVE-2026-14663 PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...
CVE-2026-14663
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...
CVE-2026-14663
Consolidated technical details (CVE-2026-14663): PostgreSQL’s pgcrypto disabled ciphers can lead to cleartext leakage because decryption may succeed with the wrong key when the application accepts encrypted input. The root cause is affected by the OpenSSL version/config and manifests in functions...
CVE-2026-68385: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csumpartial without vector facility Currently csumpartial calls csumcopy with copy=false and dst=NULL. On machines without the vector facility, csumcopy falls back to cksmdst, ..., causing the checksum to be...
JLSEC-2026-1205 libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. libcurl...
libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criteria must be met. Due to a logical error in the...
Exploit for Missing Critical Step in Authentication in Apache Tomcat
CVE-2026-55957 isolated reproduction lab This repository repr...
Contao crawler leaks auth credentials to external hosts
Summary Contao's crawler tries to prevent confidential HTTP client options from being sent to external domains by creating a scoped client: full options for root page origins, cleaned options for everything else. The cleaner removes Cookie and Authorization headers, but it removes the non-Symfony...
CVE-2026-70635 TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...
CVE-2023-7355
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-7354
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-7353
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54389
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54388
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54387
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54386
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54384
Erroneously reserved under wrong year by automation defect; never assigned...