https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:35:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-45685 EUVD-2026-45685 https://cve.radiocsirt.org/vuln/euvd-2026-45685 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25657 <p>A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.</p> <p>A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25657 https://cve.radiocsirt.org/vuln/ghsa-2j9v-8g47-mxh2 <p>A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.</p> <p>A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.</p> https://cve.radiocsirt.org/vuln/ghsa-2j9v-8g47-mxh2 https://cve.radiocsirt.org/vuln/gsd-2020-25657 gsd-2020-25657 https://cve.radiocsirt.org/vuln/gsd-2020-25657 https://cve.radiocsirt.org/vuln/msrc_cve-2020-25657 msrc_CVE-2020-25657 https://cve.radiocsirt.org/vuln/msrc_cve-2020-25657 https://cve.radiocsirt.org/vuln/oesa-2022-1852 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: m2crypto, openEuler:20.03-LTS-SP3: m2crypto, openEuler:22.03-LTS: m2crypto</p> <p>M2Crypto is a crypto and SSL toolkit for Python. It allows you to call OpenSSL functions from Python2 scripts. Security Fix(es): A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.(CVE-2020-25657)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: m2crypto, openEuler:20.03-LTS-SP3: m2crypto, openEuler:22.03-LTS: m2crypto</p> <p>M2Crypto is a crypto and SSL toolkit for Python. It allows you to call OpenSSL functions from Python2 scripts. Security Fix(es): A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.(CVE-2020-25657)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1852 https://cve.radiocsirt.org/vuln/opensuse-su-2022:2562-1 <p>Security update for python-M2Crypto</p> <p>Security update for python-M2Crypto</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:2562-1 https://cve.radiocsirt.org/vuln/rhsa-2021:1169 <p>nodejs-bootstrap-select: not escaping title values on &lt;option&gt; may lead to XSS m2crypto: bleichenbacher timing attacks in the RSA decryption API datatables.net: prototype pollution if &#39;constructor&#39; were used in a data property name nodejs-immer: prototype pollution may lead to DoS or remote code execution</p> <p>nodejs-bootstrap-select: not escaping title values on &lt;option&gt; may lead to XSS m2crypto: bleichenbacher timing attacks in the RSA decryption API datatables.net: prototype pollution if &#39;constructor&#39; were used in a data property name nodejs-immer: prototype pollution may lead to DoS or remote code execution</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1169 https://cve.radiocsirt.org/vuln/suse-ru-2025:0796-1 <p>Recommended update for python3-M2Crypto</p> <p>Recommended update for python3-M2Crypto</p> https://cve.radiocsirt.org/vuln/suse-ru-2025:0796-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25657 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: m2crypto, Ubuntu:16.04:LTS: m2crypto, Ubuntu:18.04:LTS: m2crypto, Ubuntu:20.04:LTS: m2crypto, Ubuntu:22.04:LTS: m2crypto, Ubuntu:24.04:LTS: m2crypto, Ubuntu:25.10: m2crypto, Ubuntu:26.04:LTS: m2crypto</p> <p>A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: m2crypto, Ubuntu:16.04:LTS: m2crypto, Ubuntu:18.04:LTS: m2crypto, Ubuntu:20.04:LTS: m2crypto, Ubuntu:22.04:LTS: m2crypto, Ubuntu:24.04:LTS: m2crypto, Ubuntu:25.10: m2crypto, Ubuntu:26.04:LTS: m2crypto</p> <p>A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25657 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0808 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der Red Hat Virtualization Engine ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, einen Denial of Service Zustand auszulösen und kryptographische Maßnahmen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der Red Hat Virtualization Engine ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, einen Denial of Service Zustand auszulösen und kryptographische Maßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0808