CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2075 matches found

F5 Networks•added 2023/02/21 8:00 p.m.•137 views

K33101555: Nettle cryptography library vulnerability CVE-2021-20305

Security Advisory Description A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in...

8.1CVSS6.8AI score0.01687EPSS

SaveExploits0Affected Software13

F5 Networks•added 2023/02/21 7:51 p.m.•89 views

K16938: OpenSSL vulnerability CVE-2015-1788

Security Advisory Description The BNGF2mmodinv function in crypto/bn/bngf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows...

4.3CVSS7AI score0.24447EPSS

SaveExploits0Affected Software19

F5 Networks•added 2023/02/21 7:38 p.m.•41 views

K12998: OpenSSL vulnerability CVE-2011-1945

Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribe to email notifications regarding F5 products and security announcements. Note : Versions that are not listed in this article have not been evaluated for...

2.6CVSS7.7AI score0.03288EPSS

SaveExploits1

F5 Networks•added 2023/02/21 7:28 p.m.•28 views

K15427: OpenSSL vulnerability CVE-2011-4354

Security Advisory Description crypto/bn/bnnist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST...

5.8CVSS6.6AI score0.03886EPSS

SaveExploits0

F5 Networks•added 2023/02/21 6:54 p.m.•44 views

K15405135: GO vulnerability CVE-2021-3114

Security Advisory Description In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field. CVE-2021-3114 Impact There is no impact; F5 products are not...

6.5CVSS7.1AI score0.02689EPSS

SaveExploits0

F5 Networks•added 2023/02/21 6:47 p.m.•65 views

K10105323: Java Bouncy Castle vulnerability CVE-2015-7940

Security Advisory Description The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman ECDH key exchanges, aka an "invalid curve...

5CVSS7.6AI score0.0482EPSS

SaveExploits0Affected Software1

F5 Networks•added 2023/02/21 6:35 p.m.•78 views

K49711130: OpenSSL and Intel processor SMT side-channel vulnerability (PortSmash) CVE-2018-5407

Security Advisory Description Simultaneous Multi-threading SMT in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention.' CVE-2018-5407 also known as PortSmash Impact The vulnerability allows an attacker who can...

4.7CVSS6.6AI score0.03418EPSS

SaveExploits4Affected Software17

F5 Networks•added 2023/02/21 6:10 p.m.•42 views

K16323: OpenSSL vulnerability CVE-2015-0209

Security Advisory Description Use-after-free vulnerability in the d2iECPrivateKey function in crypto/ec/ecasn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service memory corruption and application...

6.8CVSS7.6AI score0.1633EPSS

SaveExploits0Affected Software20