CVE-2022-31781

Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service ReDoS in the way it handles Content Types. Specially crafted Content Types may cause catastrophic backtracking, taking exponential time to complete. Specifically, this is about the regular expression used on...

DEBIAN-CVE-2025-15346

A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced. Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...

wolfssl-py 安全漏洞

wolfssl-py is an open source Python packaging tool from wolfSSL. A security vulnerability exists in wolfssl-py version 5.8.2 and earlier that stems from not fully enforcing client certificate requirements, which could lead to improper authentication and bypassing mutual TLS client authentication...

CVE-2025-15346

The wolfssl-py Python package is affected by CVE-2025-15346 due to improper enforcement of client certificate requirements when verify_mode is CERT_REQUIRED. The root cause is failure to include WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT, making behavior effectively CERT_OPTIONAL: a peer certificate is ...

CVE-2025-15346 wolfSSL Python library `CERT_REQUIRED` mode fails to enforce client certificate requirement

A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced. Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...

CVE-2025-11934

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...

UBUNTU-CVE-2025-11936

Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to...

PT-2025-47818

Name of the Vulnerable Software and Affected Versions wolfSSL version 5.8.2 Description A flaw exists in the TLS 1.3 KeyShareEntry parsing within wolfSSL. This issue allows a remote, unauthenticated attacker to trigger a denial-of-service condition. The attack involves sending a specially crafted...

EUVD-2021-18675

Malware in sbrugna...

EUVD-2017-16712

Malware in sbrugna...

EUVD-2022-1211

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-4843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2. CVE-2022-4843 Note that Nessus relies on the presence of the package as reported...

UBUNTU-CVE-2025-7396

In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve25519. It is not needed, or available with; ARM assembly builds, Intel assembly builds, and the small Curve25519...

CVE-2025-7396 Curve25519 Blinding

In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve25519. It is not needed, or available with; ARM assembly builds, Intel assembly builds, and the small Curve25519...

PT-2025-30103

Name of the Vulnerable Software and Affected Versions wolfSSL version 5.8.2 Description In wolfSSL release 5.8.2, blinding support is enabled by default for Curve25519 in applicable builds. This feature provides an additional layer of protection against side-channel attacks aimed at extracting a...

QNAP QTS Video Station Multiple Vulnerabilities (QSA-24-24)

QNAP Video Station is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:qnap:videostation"; if...

CVE-2023-47563

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later...

CVE-2023-47563

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later...

CVE-2023-47563

The CVE-2023-47563 entry concerns QNAP Video Station. Affected software: Video Station prior to version 5.8.2. Issue: OS command injection allowing authenticated users to execute commands over the network. Root cause and impact are consistent with an OS command injection affecting the application...

CVE-2023-47563 Video Station

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later...