46 matches found
CVE-2021-20231
A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...
CVE-2021-20231
The CVE-2021-20231 issue affects the GnuTLS library (gnutls) in the client handling of the TLS 1.3 key_share extension. The root cause is a use-after-free vulnerability that can result from dereferencing a pointer after realloc in the client path handling key_share, leading to memory corruption. ...
CVE-2019-20231
CVE-2019-20231 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-20231
Cross Site Request Forgery CSRF in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfaenabletfa parameter due to missing nonce validation...
CVE-2018-20231
CVE-2018-20231 affects the WordPress Two Factor Authentication plugin (pre-1.3.13). The vulnerability is a CSRF flaw that allows remote attackers to disable 2FA by triggering tfa_enable_tfa due to missing nonce validation. Impact is partial to high: it can disable two-factor protection, leaving a...