#cwe-327

共收录 101 条相关情报。

漏洞预警2026-10-28 发布MEDIUM

MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns True when hash_val is None, with MD5 as the default hash t...

CVE-2026-118684

MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns T

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-327 #severity:high

漏洞预警2026-10-27 发布INFO

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network ...

CVE-2026-108015

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com

来源摘录 · NVD

#cve #cwe-327

漏洞预警2026-10-27 发布INFO

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network ...

CVE-2026-108014

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com

来源摘录 · NVD

#cve #cwe-327

安全公告2026-10-24 发布INFO

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

CVE-2026-114820

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-327 #severity:critical

漏洞预警2026-09-29 发布INFO

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs accepts an all-zero 32-byte peer...

CVE-2026-102824

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

安全公告2026-09-29 发布INFO

Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

CVE-2026-102824

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-327

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...

CVE-2026-18153

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-327 #severity:medium

安全公告2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could...

CVE-2025-36084

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decry

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-327 #severity:medium

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the...

CVE-2026-18153

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensi

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-09-22 发布INFO

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVE-2025-36084

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decry

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-09-18 发布INFO

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-security-digest ignores its configure...

CVE-2026-54147

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvid

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-09-18 发布INFO

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure netw...

CVE-2025-33147

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared networ

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

安全公告2026-09-18 发布INFO

http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI

CVE-2026-54147

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvid

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-327

漏洞预警2026-09-18 发布INFO

IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly en...

CVE-2024-56344

IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain se

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remot...

CVE-2026-81438

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algori

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

安全公告2026-09-16 发布INFO

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt...

CVE-2026-15638

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using on

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-327 #severity:critical

漏洞预警2026-09-16 发布INFO

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is n...

CVE-2026-15638

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using on

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-09-15 发布INFO

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.

CVE-2026-11929

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptograph

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-09-08 发布INFO

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.

CVE-2026-69382

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclos

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encrypt...

CVE-2026-16693

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use

历史摘要 · 未重新核验 · NVD

#cve #cwe-327