22037 matches found
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1370)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP11 : openssl (EulerOS-SA-2025-1369)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-1356)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP11 : openssl (EulerOS-SA-2025-1370)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact...
CVE-2025-22926
creationtimestamp| type| source ---|---|--- 2025-04-10 20:49:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11338...
CVE-2025-27492
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
CVE-2025-26649
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...
CVE-2024-26013
A improper restriction of communication channel to intended endpoints vulnerability CWE-923 in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9 and...
crossbeam-channel Vulnerable to Double Free on Drop
The internal Channel type's Drop method has a race which could, in some circumstances, lead to a double-free. This could result in memory corruption. Quoting from the upstream description in merge request \1187: The problem lies in the fact that dicardallmessages contained two paths that could le...
GHSA-PG9F-39PC-QF8G crossbeam-channel Vulnerable to Double Free on Drop
The internal Channel type's Drop method has a race which could, in some circumstances, lead to a double-free. This could result in memory corruption. Quoting from the upstream description in merge request \1187: The problem lies in the fact that dicardallmessages contained two paths that could le...
CVE-2025-29986
Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...
CVE-2025-32216
creationtimestamp| type| source ---|---|--- 2025-04-10 08:48:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11212...
crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
A flaw was found in the Golang crypto/internal/nistec package. Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Considering how this function is used, this leaka...
K000150784: OpenSSL vulnerability CVE-2024-13176
Security Advisory Description Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker...
The vulnerability of the Secure Channel component in Windows operating systems, which allows attackers to escalate their privileges
The vulnerability of the Secure Channel component in Windows operating systems is related to the reutilization of previously released memory due to competitive access to resources. This “race condition” allows an attacker to enhance their privileges...
USN-7346-3 opensc vulnerabilities
USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a regression which broke smartcard based authentication. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSC did not correctly handle certain memory operations...
CVE-2022-4692
creationtimestamp| type| source ---|---|--- 2025-04-09 20:48:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11166...
CVE-2015-10024
creationtimestamp| type| source ---|---|--- 2025-04-09 19:48:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11150...