Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:53:29 +0000 bdu:2022-07422 https://cve.radiocsirt.org/vuln/bdu:2022-07422 bdu:2022-07422 https://cve.radiocsirt.org/vuln/bdu:2022-07422 cnvd-2017-29546 https://cve.radiocsirt.org/vuln/cnvd-2017-29546 cnvd-2017-29546 https://cve.radiocsirt.org/vuln/cnvd-2017-29546 EUVD-2026-180358 https://cve.radiocsirt.org/vuln/euvd-2026-180358 EUVD-2026-180358 https://cve.radiocsirt.org/vuln/euvd-2026-180358 fkie_cve-2017-12973 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12973 <p>Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.</p> <p>Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12973 GHSA-jfmq-4g4m-99rh — Nimbus JOSE+JWT vulnerable to padding oracle attack https://cve.radiocsirt.org/vuln/ghsa-jfmq-4g4m-99rh <p><strong>Affected:</strong> Maven: com.nimbusds:nimbus-jose-jwt</p> <p>Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.</p> <p><strong>Affected:</strong> Maven: com.nimbusds:nimbus-jose-jwt</p> <p>Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.</p> https://cve.radiocsirt.org/vuln/ghsa-jfmq-4g4m-99rh gsd-2017-12973 https://cve.radiocsirt.org/vuln/gsd-2017-12973 gsd-2017-12973 https://cve.radiocsirt.org/vuln/gsd-2017-12973 WID-SEC-W-2022-0770 — IBM DB2: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770