Jahlives vulnerabilities
66 CVEs and advisories name Jahlives as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-81721openssl_encrypt before 1.4.9 Denial of Service via KDF
- CVE-2026-81720openssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon2
- CVE-2026-81719openssl_encrypt before 1.4.9 Remote Code Execution via Plugin
- CVE-2026-81718openssl_encrypt before 1.4.9 Weak Cryptographic Parameters
- CVE-2026-81717openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
- CVE-2026-81716openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversal
- CVE-2026-81715openssl_encrypt before 1.4.9 Credential Exposure via Debug Output
- CVE-2026-81714openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass
- CVE-2026-81707openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email
- CVE-2026-81706openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowing
- CVE-2026-81705openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug
- CVE-2026-81704openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus
- CVE-2026-81703openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key
- CVE-2026-81702openssl_encrypt before 1.4.9 Key Substitution via Identity Load
- CVE-2026-81701openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin
- CVE-2026-81700openssl_encrypt before 1.4.9 GPG Signature Verification Bypass
- CVE-2026-81699openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF cost
- CVE-2026-81698openssl_encrypt before 1.4.9 Shell Injection via info command
- CVE-2026-81697openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration
- CVE-2026-81696openssl_encrypt before 1.4.9 Terminal Injection via info Command
- CVE-2026-81695openssl_encrypt before 1.4.9 Terminal Injection via key_id
- CVE-2026-81694openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command
- CVE-2026-81693openssl_encrypt before 1.4.9 Denial of Service via QR total field
- CVE-2026-81692openssl_encrypt before 1.4.9 Denial of Service via STREAMINFO
- CVE-2026-81691openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs
- CVE-2026-81690verify-usb before 1.4.9 Symlink Directory Traversal Code Execution
- CVE-2026-81689openssl_encrypt before 1.4.9 Weak Pepper Key Derivation
- CVE-2026-81688openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256
- CVE-2026-81687openssl_encrypt before 1.4.9 Denial of Service via KDF
- CVE-2026-81686openssl_encrypt before 1.4.9 D-Bus Properties Authorization Bypass