71 matches found
CVE-2026-6135
creationtimestamp| type| source ---|---|--- 2026-04-13 01:11:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdony6vm72x 2026-04-13 01:17:28+00:00| published-proof-of-concept| Telegram/A9AkdEoDX482Ts0y8kQA9I8MkTC9694Q14KUe3E0K9rcYHU 2026-05-27 00:37:08+00:00| seen|...
MiracleLinux 9 : nss-3.90.0-6.el9_3 (AXSA:2024-7519:03)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7519:03 advisory. nss: vulnerable to Minerva side-channel information leak CVE-2023-6135 Tenable has extracted the preceding description block directly from the MiracleLinux...
CVE-2025-6135
creationtimestamp| type| source ---|---|--- 2025-06-16 19:40:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18515...
CVE-2025-6135
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...
CVE-2025-6135 Projectworlds Life Insurance Management System insertNominee.php sql injection
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument clientid/nomineeid leads to sql injection. The attack can be initiated...
CVE-2025-6135
CVE-2025-6135 affects Projectworlds Life Insurance Management System v1.0. The vulnerability resides in /insertNominee.php, where manipulation of the arguments client_id/nominee_id enables SQL injection. Reports indicate remote exploitation with the exploit disclosed publicly. Affected components...
Alibaba Cloud Linux 3 : 0216: nss (ALINUX3-SA-2024:0216)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0216 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-5388: NSS was susceptible to a...
CVE-2024-6135
BT:Classic: Multiple missing buf length checks...
CVE-2024-6135
creationtimestamp| type| source ---|---|--- 2024-09-13 22:59:19+00:00| seen| https://t.me/cvedetector/5653...
CVE-2024-6135 BT:Classic: Multiple missing buf length checks
BT:Classic: Multiple missing buf length checks...
CVE-2024-6135 BT:Classic: Multiple missing buf length checks
BT:Classic: Multiple missing buf length checks...
CVE-2024-6135
CVE-2024-6135 relates to Zephyr RTOS (BT Classic) where the protocol handling lacks several buffer length checks, enabling a heap-based buffer overflow. Connected sources describe inadequate validation of buffer lengths in BLE/connection update flows and multiple missing length checks in the BT C...
Security Bulletin: Vulnerability in nss library (CVE-2023-6135) affects Power HMC.
Summary The nss library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-6135 DESCRIPTION: Mozilla Network Security Services NSS NIST curves, as used in Mozilla Firefox, could allow a remote attacker to obtain sensitive...
RHEL 7 : nss (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nss: Insufficient timing side-channel resistance in divSpoiler CVE-2016-9074 - nss before version 3.30 is...
nss security update
An update is available for nss. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...
RLSA-2024:0786 Moderate: nss security update
Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fixes: nss: vulnerable to Minerva side-channel information leak CVE-2023-6135 For more details about the security issues, including t...
Rocky Linux 8 : nss (RLSA-2024:0786)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:0786 advisory. - Multiple NSS NIST curves were susceptible to a side-channel attack known as Minerva. This attack could potentially allow an attacker to recover the private key...
CVE-2012-6135
creationtimestamp| type| source ---|---|--- 2024-02-23 18:11:34+00:00| seen| https://t.me/ctinow/191991...
Amazon Linux 2023 : nspr, nspr-devel, nss (ALAS2023-2024-523)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-523 advisory. Multiple NSS NIST curves were susceptible to a side-channel attack known as Minerva. This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox 121...
Medium: nss
Issue Overview: Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox 121. CVE-2023-6135 Affected Packages: nss Issue Correction: Run dnf update nss...