Lucene search
+L

30 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.5 views

MAL-2025-9243 Malicious code in @povsicoenpm/consequatur-aut-harum-veritatis (npm)

The package @povsicoenpm/consequatur-aut-harum-veritatis was found to contain malicious code...

7.2AI score
SaveExploits0
Circl
Circl
added 2024/09/26 5:00 a.m.14 views

CVE-2024-9243

creationtimestamp| type| source ---|---|--- 2024-09-26 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1296/...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/03/23 12:00 a.m.36 views

Oracle Linux 8 : openssl (ELSA-2022-9243)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9243 advisory. 1:1.1.1k-5.0.1 - fix CVE-2022-0778 - possible infinite loop in BNmodsqrt Orabug: 33974871 Tenable has extracted the preceding description block directly from th...

7.5CVSS7AI score0.73188EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.16 views

Mageia: Security Advisory (MGASA-2016-0377)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.03399EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/09/15 12:00 a.m.17 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2021-2428)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.3AI score0.03399EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/05/03 12:00 a.m.19 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2021-1837)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.3AI score0.03399EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/04/30 12:00 a.m.34 views

EulerOS 2.0 SP3 : python-cryptography (EulerOS-SA-2021-1837)

According to the version of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize.CVE-2016-9243 Note...

7.5CVSS6.5AI score0.03399EPSS
SaveExploits0References2
CVE
CVE
added 2020/08/10 7:01 p.m.62 views

CVE-2020-9243

CVE-2020-9243 affects Huawei Mate 30 devices running versions earlier than 10.1.0.150 (C00E136R5P3). The issue is a denial-of-service vulnerability caused by insufficient recursion depth limiting in the system, which an attacker can trigger by convincing a user to install and run a malicious app....

5.5CVSS5.6AI score0.00469EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/10 7:01 p.m.33 views

CVE-2020-9243

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a denial of service vulnerability. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service...

5.6AI score0.00469EPSS
SaveExploits0References1
Huawei
Huawei
added 2020/08/05 12:00 a.m.27 views

Security Advisory - Denial of Service Vulnerability in Several Smartphones

There is a denial of service vulnerability in several smartphones. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service condition. Vulnerability ID:...

5.5CVSS5.5AI score0.00469EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2019/09/27 6:05 p.m.77 views

CVE-2019-9243

CVE-2019-9243 affects wpa_supplicant_8 in Android 10. The vulnerability is an out-of-bounds read caused by a missing bounds check in a component of wpa_supplicant_8, leading to local information disclosure without requiring privileges; no user interaction is needed. Several connected records corr...

5.5CVSS5.6AI score0.00156EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2018/05/29 8:00 p.m.61 views

CVE-2015-9243

CVE-2015-9243 affects the hapi Node.js framework prior to version 11.1.4, where merging server/connection/route-level CORS configurations could cause security restrictions (e.g., origin) to be overridden by less restrictive defaults (origin → *). This confluence creates weaker CORS controls than ...

5.9CVSS5.6AI score0.01039EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2018/04/05 2:00 p.m.59 views

CVE-2018-9243

CVE-2018-9243 affects GitLab Community and Enterprise Editions from 8.4 up to 10.4. The vulnerability arises from a lack of input validation in the merge request component, enabling cross-site scripting via filenames shown in the changes tab. A fix is available in 10.6.3, 10.5.7, and 10.4.7 (per ...

6.1CVSS5.6AI score0.01002EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2017/05/28 6:29 p.m.17 views

CVE-2017-9243

Aries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on the Wireless Site Survey page, exploitable with the name of an access point...

6.1CVSS6.1AI score0.00954EPSS
SaveExploits1References2
OSV
OSV
added 2017/05/28 6:29 p.m.7 views

CVE-2017-9243

Aries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on the Wireless Site Survey page, exploitable with the name of an access point...

6.1CVSS5.8AI score0.00954EPSS
SaveExploits1References2
OSV
OSV
added 2017/03/27 5:59 p.m.5 views

DEBIAN-CVE-2016-9243

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize...

7.5CVSS6.9AI score0.03399EPSS
SaveExploits0References1
OSV
OSV
added 2017/03/27 5:59 p.m.4 views

BELL-CVE-2016-9243 CVE-2016-9243 does not affect BellSoft software

Bulletin has no description...

7.5CVSS5.8AI score0.03399EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2017/03/27 5:00 p.m.46 views

CVE-2016-9243

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize...

7.5CVSS6.1AI score0.03399EPSS
SaveExploits0
CVE
CVE
added 2017/03/27 5:00 p.m.172 views

CVE-2016-9243

CVE-2016-9243 affects the python-cryptography HKDF implementation. The vulnerability is that HKDF in cryptography before 1.5.2/1.5.3 returns an empty byte-string when used with a length shorter than algorithm.digest_size. Public-era advisories (Ubuntu USN-3138-1, Fedora FEDORA-2016-d3a2b640ce, De...

7.5CVSS7.2AI score0.03399EPSS
SaveExploits0References9Affected Software1
OpenVAS
OpenVAS
added 2016/12/07 12:00 a.m.23 views

Fedora Update for python-cryptography FEDORA-2016-2d90e27e50

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.03399EPSS
SaveExploits0References2
Rows per page
Query Builder