Vendors / latchset Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now latchset records in CISA KEV No latchset vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 66
latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01383 · Published 2024-03-20 · Partial fix CWE-400
Priority MEDIUM 63
JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00306 · Published 2026-04-07 · Partial fix · 1.5.7 CWE-409
Priority MEDIUM 63
JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.
CVSS 3.1 MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.0098 · Published 2024-03-06 · Partial fix · 1.5.6 CWE-770
Priority MEDIUM 44
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.00491 · Published 2025-11-12 · Fixed in 1.1.0, 1.0.0-19.el10_1 +13 CWE-918
Priority LOW 36
A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards (PKCS#11).
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00565 · Published 2024-01-30 · Fixed in 0.2 CWE-1300
Priority LOW 28
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million…
CVSS 3.1 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.02226 · Published 2016-09-01 · Fixed in 0.3.2 CWE-200
Priority LOW 27
If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0056 · Published 2025-11-12 · Fixed in 1.1.0, 1.0.0-19.el10_1 +13 CWE-770
Priority LOW 26
A vulnerability was found in JWCrypto.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00884 · Published 2024-02-12 · Partial fix · 8100020240417004735.143e9e98, 8100020240416171943.823393f5 +2 CWE-400
Priority LOW 19
A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format.
CVSS 3.1 MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00102 · Published 2025-10-15 · Partial fix · 10, 10-1.el10 +2 CWE-1284
Open these records in search → All records by CVSS severity
0 3 6 0 0
THREATIST.IORead the docs