Lucene search
+L

143 matches found

Kitploit
Kitploit
•added 2026/10/30 3:07 p.m.•29 views

CVE-2020-3580

This repository does not have a README...

6.1CVSS7.2AI score0.85575EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/30 10:25 a.m.•30 views

CVE-2020-3580

CVE-2020-3580 Automated Scanner CVE-2020-3580 - Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software XSS. Usage ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 place domains/IP that you need to scan as .txt file format in th...

6.1CVSS7.5AI score0.85575EPSS
SaveExploits2
osv_clsa
osv_clsa
•added 2026/04/29 8:37 a.m.•28 views

CLSA-2026-1777451834 nettle: Fix of CVE-2021-3580

CVE-2021-3580: add input validation to RSA decrypt family and length check to pkcs1secdecrypt...

7.5CVSS6.5AI score0.02708EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/03/19 8:16 p.m.•44 views

DEBIAN-CVE-2026-3580

In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...

4.7CVSS5.9AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/19 8:16 p.m.•25 views

CVE-2026-3580

In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...

4.7CVSS0.00133EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/19 7:46 p.m.•12 views

CVE-2026-3580 Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V

In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...

2.1CVSS5.9AI score0.00133EPSS
SaveExploits0References1
Circl
Circl
•added 2026/03/19 7:16 p.m.•30 views

CVE-2026-3580

creationtimestamp| type| source ---|---|--- 2026-03-19 19:16:14+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3580...

4.7CVSS5.8AI score0.00133EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•15 views

MiracleLinux 8 : gnutls-3.6.16-4.el8, nettle-3.4.1-7.el8 (AXSA:2021-2630:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2630:02 advisory. nettle: Remote crash in RSA decryption via manipulated ciphertext CVE-2021-3580 gnutls: Use after free in client keyshare extension CVE-2021-20231...

9.8CVSS7.4AI score0.03648EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2011-3580

Malware in sbrugna...

9.8CVSS8.1AI score0.01197EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2025/06/18 2:12 a.m.•16 views

Security update for grafana

This update for grafana fixes the following issues: grafana was updated from version 10.4.15 to 11.5.5 jscPED-12918: Security issues fixed: CVE-2025-4123: Fix cross-site scripting vulnerability bsc1243714. CVE-2025-22872: Bump golang.org/x/net/html bsc1241809 CVE-2025-3580: Prevent unauthorized...

9.9CVSS6.7AI score0.97553EPSS
SaveExploits24References42
Tenable Nessus
Tenable Nessus
•added 2025/06/16 12:00 a.m.•13 views

TencentOS Server 3: nettle (TSSA-2022:0214)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0214 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.5CVSS6.3AI score0.02708EPSS
SaveExploits0References2
NVD
NVD
•added 2025/05/23 2:15 p.m.•27 views

CVE-2025-3580

An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint. The vulnerability can be exploited when: 1. An Organization administrator...

5.5CVSS0.0048EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/23 1:44 p.m.•253 views

CVE-2025-3580

CVE-2025-3580 (Grafana Open Source) : An access-control flaw in the DELETE /api/org/users/ endpoint allows an Organization administrator to permanently delete the Server administrator account. If the sole Server admin is deleted, the Grafana instance becomes unmanageable with no super-user permis...

5.5CVSS7AI score0.0048EPSS
SaveIn wildExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:16 a.m.•20 views

CVE-2023-3580

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...

5.4CVSS5.6AI score0.00638EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:08 p.m.•24 views

CVE-2022-3580

A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

6.1CVSS4.1AI score0.00406EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:10 a.m.•28 views

CVE-2019-3580

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

7.5CVSS7.4AI score0.01853EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2021-3580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated...

7.5CVSS6.4AI score0.02708EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2014-3580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The moddavsvn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service NUL...

5CVSS7.9AI score0.11003EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•32 views

RHEL 7 : nettle (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nettle: Leaky data conversion exposing a manager oracle CVE-2018-16869 - A flaw was found in the way...

7.5CVSS6.2AI score0.02708EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/17 6:00 a.m.•76 views

CVE-2024-3580

The Popup4Phone WordPress plugin (versions 1.3.2 and earlier ) contains a Stored Cross-Site Scripting (XSS) vulnerability due to a failure to properly sanitize and escape certain settings. This flaw allows users with elevated privileges, such as Editors , to inject and execute arbitrary JavaScrip...

6.1CVSS7.3AI score0.00389EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder