Lucene search
+L

2402 matches found

OSV
OSV
added 2024/03/27 12:15 a.m.8 views

CVE-2024-2209

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility FUU bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution...

6.3CVSS6AI score0.00211EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/21 6:15 a.m.11 views

AZL-37108 CVE-2024-28835 affecting package gnutls for versions less than 3.8.3-2

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

5CVSS6.5AI score0.00389EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/21 6:15 a.m.4 views

DEBIAN-CVE-2024-28835

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

5CVSS5.8AI score0.00389EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/21 6:15 a.m.6 views

ALPINE-CVE-2024-28835

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

5CVSS6.8AI score0.00389EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/21 6:15 a.m.9 views

UBUNTU-CVE-2024-28835

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

5CVSS6.6AI score0.00389EPSS
SaveExploits0References7
CVE
CVE
added 2024/03/21 6:13 a.m.268 views

CVE-2024-28835

CVE-2024-28835 and CVE-2024-28834 affect GnuTLS (gnutls library). CVE-2024-28835 can cause an application crash when verifying a specially crafted PEM bundle with certtool --verify-chain. CVE-2024-28834 describes a timing side-channel (Minerva) in certain ECDSA/nonces, potentially leaking informa...

5CVSS5.7AI score0.00389EPSS
SaveExploits0References10
OSV
OSV
added 2024/03/21 6:13 a.m.31 views

CVE-2024-28835 Gnutls: potential crash during chain building/verification

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

5CVSS6.3AI score
SaveExploits0References14
Vulnrichment
Vulnrichment
added 2024/03/21 6:13 a.m.28 views

CVE-2024-28835 Gnutls: potential crash during chain building/verification

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

5CVSS6.5AI score0.00389EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2024/03/21 6:13 a.m.52 views

CVE-2024-28835

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

5CVSS5.9AI score0.00389EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/03/21 6:08 a.m.36 views

CVE-2024-28835

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red...

5CVSS5.6AI score0.00389EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/03/21 3:49 a.m.7 views

SUSE CVE-2024-28835

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

5CVSS9.3AI score0.00389EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2024/03/21 12:00 a.m.37 views

CVE-2024-28835

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command...

5CVSS6.6AI score0.00389EPSS
SaveExploits0References6
Circl
Circl
added 2024/03/18 3:36 p.m.9 views

CVE-2024-26640

creationtimestamp| type| source ---|---|--- 2024-03-18 15:36:29+00:00| seen| https://t.me/ctinow/210658 2025-03-10 19:39:12+00:00| published-proof-of-concept| Telegram/LGGFcI5uZDrshxavzOD80uijfwXg0bxLVdFssSWSkPsXLA6 2025-12-03 14:14:49+00:00| seen|...

7.8CVSS6.4AI score0.0024EPSS
SaveExploits0References2
Circl
Circl
added 2024/03/18 12:26 p.m.10 views

CVE-2023-52614

creationtimestamp| type| source ---|---|--- 2024-03-18 12:26:53+00:00| seen| https://t.me/ctinow/210441 2024-03-18 14:31:53+00:00| seen| https://t.me/ctinow/210554 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

7.8CVSS6.1AI score0.00259EPSS
SaveExploits0References3
Circl
Circl
added 2024/03/18 12:26 p.m.8 views

CVE-2023-52610

creationtimestamp| type| source ---|---|--- 2024-03-18 12:26:49+00:00| seen| https://t.me/ctinow/210437 2024-03-18 14:32:00+00:00| seen| https://t.me/ctinow/210558 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

7.5CVSS6.3AI score0.00639EPSS
SaveExploits0References3
Circl
Circl
added 2024/03/16 8:31 p.m.7 views

CVE-2021-47113

creationtimestamp| type| source ---|---|--- 2024-03-16 20:31:24+00:00| seen| https://t.me/ctinow/209707 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

7.1CVSS6.7AI score0.00269EPSS
SaveExploits0References2
Circl
Circl
added 2024/03/15 10:27 p.m.8 views

CVE-2021-47131

creationtimestamp| type| source ---|---|--- 2024-03-15 22:27:20+00:00| seen| https://t.me/ctinow/209219 2024-03-16 19:31:47+00:00| seen| https://t.me/ctinow/209677 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

8.1CVSS6.7AI score0.00744EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/13 4:15 p.m.11 views

CVE-2024-1723

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.58.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor acce...

5.4CVSS5.9AI score0.00501EPSS
SaveExploits0References3
NVD
NVD
added 2024/03/13 4:15 p.m.33 views

CVE-2024-1723

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.58.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor acce...

6.4CVSS5.8AI score0.00501EPSS
SaveExploits0References3
Prion
Prion
added 2024/03/13 4:15 p.m.25 views

Cross site scripting

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.58.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor acce...

5.5CVSS6AI score0.00501EPSS
SaveExploits0References3
Rows per page
Query Builder