Lucene search
+L

9673 matches found

OSV
OSV
•added 2025/02/04 8:15 p.m.•12 views

UBUNTU-CVE-2025-0509

A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks...

7.3CVSS7.2AI score0.00904EPSS
SaveExploits0References2
Mend
Mend
•added 2025/02/04 8:01 p.m.•7 views

CVE-2025-0509

A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks...

7.3CVSS0.00904EPSS
SaveExploits0References9
GitLab Advisory Database
GitLab Advisory Database
•added 2025/02/04 12:00 a.m.•25 views

Sparkle Signing Checks Bypass

A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks...

7.3CVSS6.8AI score0.00904EPSS
SaveExploits0References6Affected Software1
OpenVAS
OpenVAS
•added 2025/01/31 12:00 a.m.•17 views

Debian: Security Advisory (DSA-5855-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.00343EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/01/31 12:00 a.m.•17 views

Debian: Security Advisory (DSA-5856-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.7AI score0.08169EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2025/01/27 12:00 a.m.•26 views

Debian dsa-5851 : pdns-recursor - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5851 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5852-1 [email protected] https://www.debian.org/security/ Moritz...

7.5CVSS7.6AI score0.00698EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/01/23 12:00 a.m.•17 views

Debian: Security Advisory (DSA-5847-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.27523EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2025/01/18 4:09 a.m.•18 views

SUSE CVE-2023-46234

browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in dsaVerify function allows an attacker to construct signatures that can be successfully verified by any...

7.5CVSS7AI score0.00508EPSS
SaveExploits0References3
F5 Networks
F5 Networks
•added 2025/01/15 6:56 p.m.•36 views

K000149306: OpenSSL vulnerability CVE-2024-4603

Security Advisory Description Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVPPKEYparamcheck or EVPPKEYpubliccheck to check a DSA public key or DSA parameters may experience long delays. Where the key or...

5.3CVSS7.1AI score0.01131EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2025/01/15 12:00 a.m.•26 views

Debian: Security Advisory (DSA-5844-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.7AI score0.05996EPSS
SaveExploits11References2
OpenVAS
OpenVAS
•added 2025/01/13 12:00 a.m.•17 views

Debian: Security Advisory (DSA-5842-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS6.4AI score0.00559EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/01/10 12:00 a.m.•11 views

Debian: Security Advisory (DSA-5840-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.08348EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/01/04 12:00 a.m.•22 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : liboqs, oqs-provider (SUSE-SU-2025:0005-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0005-1 advisory. This update supplies the new FIPS standardized ML-KEM, ML-DSA, SHL-DSA algorithms. This update...

8.2CVSS7.5AI score0.00515EPSS
SaveExploits0References10
SUSE Linux
SUSE Linux
•added 2025/01/02 8:01 a.m.•20 views

Security update for liboqs, oqs-provider

This update for liboqs, oqs-provider fixes the following issues: This update supplies the new FIPS standardized ML-KEM, ML-DSA, SHL-DSA algorithms. This update liboqs to 0.12.0: This release updates the ML-DSA implementation to the final FIPS 204 version. This release still includes the NIST Roun...

8.2CVSS7.4AI score0.00515EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2025-42741

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.24.9-alt1 Gobuster version 3.8.2 complyctl affected versions not specified containernetworking-plugins version 1.9.0 OpenTofu affected versions not specified Description The Go programming language contains a flaw in the...

9.8CVSS7.5AI score0.00381EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/12/30 3:48 a.m.•10 views

SUSE CVE-2024-56717

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRCPORT field in ocelotifhsetbasic Packets injected by the CPU should have a SRCPORT field equal to the CPU port module index in the Analyzer block ocelot-numphysports. The blamed commit copie...

6.1CVSS7.7AI score0.00446EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/29 9:15 a.m.•14 views

CVE-2024-56717

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRCPORT field in ocelotifhsetbasic Packets injected by the CPU should have a SRCPORT field equal to the CPU port module index in the Analyzer block ocelot-numphysports. The blamed commit copie...

7.5CVSS0.00446EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/12/29 8:48 a.m.•28 views

CVE-2024-56717 net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRCPORT field in ocelotifhsetbasic Packets injected by the CPU should have a SRCPORT field equal to the CPU port module index in the Analyzer block ocelot-numphysports. The blamed commit copie...

7.5CVSS0.00446EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/12/23 12:00 a.m.•13 views

Debian: Security Advisory (DSA-5834-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.07147EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/12/20 12:00 a.m.•19 views

Tenable Security Center Multiple Vulnerabilities (TNS-2024-21)

According to its self-reported version, the Tenable Security Center running on the remote host is version 6.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-21 advisory. - In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14,...

9.8CVSS7.3AI score0.66582EPSS
SaveExploits5References11
Rows per page
Query Builder