Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files
CVE-2026-63572
Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc
2026-10-03 归档
今日共收录 1361 条安全情报，包含 499 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Attribute certificate path validation does not verify the attribute certificate's signature
CVE-2026-63571
Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator,
Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links
CVE-2026-63570
Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp be
MTI/A0 DHAgreement does not validate the peer's ephemeral value
CVE-2026-63569
Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Cas
Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion
CVE-2026-63568
Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PKMacBuilder) in Legio
IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)
CVE-2026-63567
Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a rem
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
CVE-2026-63566
Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReassembler) in
IesEngine stream-mode MAC forgery via length-dependent KDF split
CVE-2026-16001
Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an IesEngin
AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication
CVE-2026-15999
Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in Legion
Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter
CVE-2026-15896
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up
Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login
CVE-2026-15897
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up
calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization
CVE-2026-104054
A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooki
ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter
CVE-2026-103766
ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager
Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server
CVE-2026-103765
Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the HTTP metadata server /metadata hand
Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport
CVE-2026-103764
Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allow
Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue
CVE-2026-103761
Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePee
Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write
CVE-2026-103760
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated rem
Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image
CVE-2025-71427
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and
PictShare < 3.7.1 Predictable Delete Code via rand()
CVE-2026-104356
PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the no
PictShare < 3.7.1 Sensitive Information Disclosure via info API
CVE-2026-104051
PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain