https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:13:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04737 bdu:2022-04737 https://cve.radiocsirt.org/vuln/bdu:2022-04737 https://cve.radiocsirt.org/vuln/cnvd-2017-29537 cnvd-2017-29537 https://cve.radiocsirt.org/vuln/cnvd-2017-29537 https://cve.radiocsirt.org/vuln/euvd-2026-77441 EUVD-2026-77441 https://cve.radiocsirt.org/vuln/euvd-2026-77441 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12972 <p>In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.</p> <p>In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12972 https://cve.radiocsirt.org/vuln/ghsa-2qp9-wg27-9pcv <p><strong>Affected:</strong> Maven: com.nimbusds:nimbus-jose-jwt</p> <p>In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.</p> <p><strong>Affected:</strong> Maven: com.nimbusds:nimbus-jose-jwt</p> <p>In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.</p> https://cve.radiocsirt.org/vuln/ghsa-2qp9-wg27-9pcv https://cve.radiocsirt.org/vuln/gsd-2017-12972 gsd-2017-12972 https://cve.radiocsirt.org/vuln/gsd-2017-12972 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770