17 matches found
SUSE SLES15 Security Update : strongswan (SUSE-SU-2026:2368-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2368-1 advisory. This update for strongswan fixes the following issues - CVE-2026-35328: infinite loop when handling supported versions TLS extensio...
SUSE SLES15 Security Update : strongswan (SUSE-SU-2026:2197-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2197-1 advisory. - CVE-2026-35328: infinite loop when handling supported versions TLS extension bsc1261712. - CVE-2026-35329: null pointer dereferen...
OPENSUSE-SU-2026:20678-1 Security update for strongswan
This update for strongswan fixes the following issues: Update to version 6.0.6 jscPED-16145. Security issued fixed: - CVE-2026-35328: infinite loop when handling supported versions TLS extension bsc1261712. - CVE-2026-35329: NULL pointer dereference when processing padding in PKCS7 bsc1261717. -...
SUSE-SU-2026:21547-1 Security update for strongswan
This update for strongswan fixes the following issues: Update to version 6.0.6 jscPED-16145. Security issued fixed: - CVE-2026-35328: infinite loop when handling supported versions TLS extension bsc1261712. - CVE-2026-35329: NULL pointer dereference when processing padding in PKCS7 bsc1261717. -...
SUSE CVE-2026-35333
unknown...
PT-2026-35580
USN-8196-1 fixed vulnerabilities in strongSwan. This update provides the corresponding update to Ubuntu 26.04 LTS. Original advisory details: Haruto Kimura discovered that strongSwan incorrectly handled the supported versions extension in TLS. A remote attacker could possibly use this issue to...
Linux Distros Unpatched Vulnerability : CVE-2026-35333
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - strongswan - None Ubuntu Linux - Integer Underflow When Handling RADIUS Attributes CVE-2026-35333 Note that Nessus relies on the presence of the...
MAL-2025-35333 Malicious code in test-mlw2-fiche-lytta (npm)
The package test-mlw2-fiche-lytta was found to contain malicious code...
CVE-2024-35333
A stack-buffer-overflow vulnerability exists in the readcharsetdecl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the...
CVE-2024-35333
A stack-buffer-overflow vulnerability exists in the readcharsetdecl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the...
CVE-2024-35333
CVE-2024-35333 affects html2xhtml version 1.3, specifically the read_charset_decl function. The root cause is improper bounds checking when copying data into a fixed-size stack buffer, allowing a stack-based overflow. Reported impact includes arbitrary code execution, denial of service, or data c...
CVE-2024-35333
A stack-buffer-overflow vulnerability exists in the readcharsetdecl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the...
CVE-2023-35333 MediaWiki PandocUpload Extension Remote Code Execution Vulnerability
...
CVE-2023-35333
CVE-2023-35333 is a remote code execution vulnerability in the MediaWiki PandocUpload Extension. The underlying issue is insufficient input validation when processing shell arguments in the PandocUpload extension, which can be exploited remotely to execute arbitrary code on the affected host. Doc...
KLA50771 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability...