Lucene search
K

21 matches found

OSV
OSV
added 2026/05/26 2:17 p.m.4 views

JLSEC-2026-521

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

9.8CVSS7.1AI score0.00844EPSS
Exploits0References24
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.5 views

PT-2026-47003

A flaw was found in gnutls. A use after free issue in client send params in lib/ext/pre shared key.c may lead to memory corruption and other potential consequences...

5.5AI score
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.6 views

Unity Linux 20.1060e / 20.1070e Security Update: gnutls (UTSA-2026-017621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017621 advisory. A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

9.8CVSS6.7AI score0.00844EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/09 12:0 a.m.10 views

PT-2026-39334

A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs sbi client send via scp or sepp in the library lib/sbi/client.c of the component NF. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. The patch is named...

6.9CVSS5.8AI score0.00093EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.2 views

Siemens SIMATIC S7-1500 Use After Free (CVE-2021-20232)

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 809...

9.8CVSS6.6AI score0.00844EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-7671

Malicious code in bioql PyPI...

9.8CVSS7.1AI score0.00844EPSS
Exploits0References17
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.0 views

SUSE CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

7.4CVSS6.9AI score0.00844EPSS
Exploits0References111
OSV
OSV
added 2023/01/11 11:54 p.m.31 views

GHSA-M95X-M25C-W9MP XML-RPC for PHP allows access to local files via malicious argument to the Client::send method

Abusing the $method argument of Client::send, it was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url the one used in the Client constructor. This weakness only affects installations where all the following conditions appl...

7.1AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2023/01/11 11:54 p.m.24 views

XML-RPC for PHP allows access to local files via malicious argument to the Client::send method

Abusing the $method argument of Client::send, it was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url the one used in the Client constructor. This weakness only affects installations where all the following conditions appl...

0.2AI score
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.2 views

PT-2023-33042 · Unknown · Xmlrpc Client

Name of the Vulnerable Software and Affected Versions: xmlrpc Client affected versions not specified Description: The issue allows an attacker to force the client to access local files or connect to undesired URLs instead of the intended target server's URL. This is possible by abusing the $metho...

6.7AI score
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/12/02 12:0 a.m.3 views

PT-2022-28271 · Phpxmlrpc · Phpxmlrpc

Name of the Vulnerable Software and Affected Versions: phpxmlrpc affected versions not specified Description: The issue concerns argument injection via local file access in the Client:send function. This is achieved through manipulation of the $protocol argument. Recommendations: At the moment,...

7.1AI score
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.1 views

The vulnerability in the `client_send_params` function of the `lib/ext/pre_shared_key.c` component of the Transport Layer Security library GnuTLS, related to the use of memory after it is freed, allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the clientsendparams function in the lib/ext/presharedkey.c component of the Transport Layer Security library GnuTLS is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

9.8CVSS6.7AI score0.00844EPSS
Exploits0References10Affected Software5
Microsoft CVE
Microsoft CVE
added 2021/03/20 7:0 a.m.2 views

A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.

...

9.8CVSS6.4AI score0.00844EPSS
Exploits0
OSV
OSV
added 2021/03/12 7:15 p.m.2 views

ALPINE-CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

9.8CVSS6.8AI score0.00844EPSS
Exploits0References1
OSV
OSV
added 2021/03/12 7:15 p.m.23 views

CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

9.8CVSS6.8AI score
Exploits0References12
OSV
OSV
added 2021/03/12 7:15 p.m.3 views

AZL-6447 CVE-2021-20232 affecting package gnutls for versions less than 3.6.14-5

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

9.8CVSS6.7AI score0.00844EPSS
Exploits0References1
OSV
OSV
added 2021/03/12 7:15 p.m.1 views

UBUNTU-CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

9.8CVSS6.7AI score0.00844EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2021/03/12 6:25 p.m.0 views

CVE-2021-20232

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences...

6.4AI score0.00844EPSS
Exploits0References12
CNNVD
CNNVD
added 2021/03/12 12:0 a.m.2 views

GnuTLS 资源管理错误漏洞

GnuTLS is a free secure communication library for implementing SSL, TLS and DTLS protocols. A security vulnerability exists in gnutls, which originates from memory corruption due to clientsendparams in lib/ext/presharedkey.c...

9.8CVSS7.1AI score0.00844EPSS
Exploits0References52
Positive Technologies
Positive Technologies
added 2021/01/22 12:0 a.m.3 views

PT-2021-5771

Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description A flaw was found in the client send params function of the lib/ext/pre shared key.c component, related to a use after free issue. This may lead to memory corruption and other potential...

10CVSS7.2AI score0.71356EPSS
Exploits11References102
Rows per page
Query Builder