#cwe-327

共收录 101 条相关情报。

← 返回所有主题
漏洞预警2026-06-28 发布INFO

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of ...

CVE-2026-13510

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in

历史摘要 · 未重新核验 · NVD

安全公告2026-06-28 发布INFO

A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function...

CVE-2026-13482

A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function username.encode of the file

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-26 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP filter's encrypt()/decrypt()...

CVE-2026-47775

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3,

历史摘要 · 未重新核验 · NVD

安全公告2026-06-26 发布INFO

The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5...

CVE-2026-9221

The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to generate a request si

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-26 发布INFO

The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the...

CVE-2026-6330

The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-26 发布INFO

The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to generate a request signature for authenticating communications between the mob...

CVE-2026-9221

The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to generate a request si

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that...

CVE-2026-6330

The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's i

历史摘要 · 未重新核验 · NVD

安全公告2026-06-25 发布INFO

Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1...

CVE-2026-6412

Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1/MD5 in certificate proce

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-25 发布INFO

Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1/MD5 in certificate processing.

CVE-2026-6412

Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1/MD5 in certificate proce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-17 发布INFO

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Encryption 4.0.0 through 4...

CVE-2026-50268

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati

历史摘要 · 未重新核验 · NVD

安全公告2026-06-17 发布INFO

Dell PowerFlex Manager, version(s) 4.6.0.1, contain(s) an Use of a Broken or Risky Cryptographic...

CVE-2026-40641

Dell PowerFlex Manager, version(s) 4.6.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-16 发布INFO

Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier

CVE-2026-9261

Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-16 发布INFO

Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier

CVE-2026-9261

Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306...

CVE-2026-50086

The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing ke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-11 发布INFO

Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default for validation RequestData. Inbound WS-Security decryption co...

CVE-2026-40996

Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default for

历史摘要 · 未重新核验 · NVD

安全公告2026-06-08 发布INFO

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the...

CVE-2026-11481

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.L

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-08 发布INFO

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown...

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file ind

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-08 发布INFO

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the ...

CVE-2026-11481

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.L

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such man...

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file ind

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `hmacBase64()` function in the HAXcms Node.js backend contains two critical cry...

CVE-2026-46395

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `hmacBase64()` functio

历史摘要 · 未重新核验 · NVD