#cwe-325

共收录 18 条相关情报。

← 返回所有主题
漏洞预警2026-10-09 发布INFO

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 byte...

CVE-2026-107785

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering sessi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can obser...

CVE-2026-16000

Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc

历史摘要 · 未重新核验 · NVD

安全公告2026-10-02 发布INFO

KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used

CVE-2026-16000

Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-23 发布INFO

A vulnerability was identified in sfturing hosp_order up to...

CVE-2026-96552

A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected eleme

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the file ssm_pro/src/mai...

CVE-2026-96552

A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected eleme

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially e...

CVE-2026-81235

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."

CVE-2026-25250

EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC c...

CVE-2026-59776

Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

CVE-2026-58638

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

Missing cryptographic step in Caliptra Core Firmware (aes_256_gcm_update module) results in an incorrect GCM authentication tag. When the streaming AES-256-GCM API is used with ...

CVE-2026-6458

Missing cryptographic step in Caliptra Core Firmware (aes_256_gcm_update module) results in an incorrect GCM authenticat

历史摘要 · 未重新核验 · NVD

安全公告2026-06-23 发布INFO

OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation

CVE-2026-48480

The codec-ohttp implementation of draft-ietf-ohai-chunked-ohttp does not verify that a cryptographically-signed final ch

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-23 发布INFO

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, node:crypto.checkPrime(candidate[, options][, callback]) and crypto.checkPrimeSync(candidate[, options...

CVE-2026-49440

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, node:crypto.checkPrime(candidate[, options][,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents...

CVE-2026-9266

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty ciphertext ...

CVE-2026-45446

Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently ...

CVE-2026-45445

Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the app

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malici...

CVE-2026-42770

Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly check

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

An improper implementation of TLS certificate validation vulnerability found in ReadyCloud client app which can allow an attacker to perform attacker-in-the-middle (MiTM) style ...

CVE-2026-0420

An improper implementation of TLS certificate validation vulnerability found in ReadyCloud client app which can allow an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp implementation of draft-ietf-ohai-chunked-ohttp does not ve...

CVE-2026-48480

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp im

历史摘要 · 未重新核验 · NVD