openssl_encrypt before 1.4.9 Remote Code Execution via Plugin
CVE-2026-81719
openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature pol
2026-08-28 归档
今日共收录 1697 条安全情报，包含 762 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表openssl_encrypt before 1.4.9 Weak Cryptographic Parameters
CVE-2026-81718
openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect
openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
CVE-2026-81717
openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, wh
openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversal
CVE-2026-81716
openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox._is_safe_pat
openssl_encrypt before 1.4.9 Credential Exposure via Debug Output
CVE-2026-81715
openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserver bearer token passed as the p
openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass
CVE-2026-81714
openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key wh
openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug
CVE-2026-81705
openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied vi
openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus
CVE-2026-81704
openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile
openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key
CVE-2026-81703
openssl_encrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file m
openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin
CVE-2026-81701
openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in
openssl_encrypt before 1.4.9 GPG Signature Verification Bypass
CVE-2026-81700
openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that
openssl_encrypt before 1.4.9 Shell Injection via info command
CVE-2026-81698
openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI bl
openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration
CVE-2026-81697
openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration file resolution fla
openssl_encrypt before 1.4.9 Terminal Injection via info Command
CVE-2026-81696
openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info
openssl_encrypt before 1.4.9 Terminal Injection via key_id
CVE-2026-81695
openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt
verify-usb before 1.4.9 Output Injection via Unsanitized Filenames
CVE-2026-81694
openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the
openssl_encrypt before 1.4.9 Denial of Service via QR total field
CVE-2026-81693
openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attack
openssl_encrypt before 1.4.9 Denial of Service via STREAMINFO
CVE-2026-81692
openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples f
openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs
CVE-2026-81691
openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting
verify-usb before 1.4.9 Symlink Directory Traversal Code Execution
CVE-2026-81690
openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist s