https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T01:53:22.359719+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-03207 cnvd-2017-03207 2026-10-09T01:53:22.363190+00:00 cnvd-2017-03207 https://cve.radiocsirt.org/vuln/euvd-2026-73682 EUVD-2026-73682 2026-10-09T01:53:22.363271+00:00 EUVD-2026-73682 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5999 fkie_cve-2017-5999 2026-10-09T01:53:22.363287+00:00

An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core/Crypt.class is using the MCRYPT_RIJNDAEL_256() function (the 256-bit block version of Rijndael, not AES) instead of MCRYPT_RIJNDAEL_128 (real AES) could help an attacker to create unknown havoc in the remote system.

 https://cve.radiocsirt.org/vuln/ghsa-v4m6-phwc-pmmj GHSA-v4m6-phwc-pmmj 2026-10-09T01:53:22.363357+00:00

An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core/Crypt.class is using the MCRYPT_RIJNDAEL_256() function (the 256-bit block version of Rijndael, not AES) instead of MCRYPT_RIJNDAEL_128 (real AES) could help an attacker to create unknown havoc in the remote system.

 https://cve.radiocsirt.org/vuln/gsd-2017-5999 gsd-2017-5999 2026-10-09T01:53:22.363390+00:00 gsd-2017-5999