10810 matches found
CVE-2025-11936 Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello
Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to...
CGA-7QVG-F6QJ-366H
Bulletin has no description...
MINI-MGCV-9JCM-3WXP
Bulletin has no description...
MINI-559G-WMQ5-GFWJ
Bulletin has no description...
MINI-36RC-F9P7-G2WR
Bulletin has no description...
CGA-MQ2C-MGCR-V46W
Bulletin has no description...
MINI-JJRH-H7H6-2GCC
Bulletin has no description...
MINI-3GHC-35J4-CH2M
Bulletin has no description...
wolfSSL security vulnerabilities
wolfSSL CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from wolfSSL, Inc. in the United States. A security vulnerability exists in wolfSSL CyaSSL version v5.8.2, which stems from improper validation of TLS 1.3 KeyShareEntry parsed inputs, which...
EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2025-2445)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject...
MINI-62HQ-8C7V-7XJG
Bulletin has no description...
EUVD-2025-198284
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS.This issue affects Pyxis Signage: through 31012025...
MINI-CMH4-9C36-GCFW
Bulletin has no description...
MINI-5R94-9GVJ-5R5V
Bulletin has no description...
CVE-2025-64734
The CVE-2025-64734 entry concerns a resource handling flaw (Missing Release of Resource after Effective Lifetime, CWE-772) in the Gallagher T-Series Reader. The vulnerability can permit a physical-attacker to cause a denial-of-service against a specific reader, blocking cardholders from badging. ...
PT-2025-47414
Name of the Vulnerable Software and Affected Versions Emby Server versions prior to 4.8.1.0 Emby Server versions prior to 4.9.0.0-beta Description Emby Server is a personal media server. A malicious user can send an authentication request with a manipulated X-Emby-Client value. This value is adde...
Student Record System admin-profile.php File SQL Injection Vulnerability
Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the adminname and aemailid parameters of admin-profile.php. An attacker can exploit this vulnerability t...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56615)
bpf: OOB devmap writes when deleting elements against XSKMAP which also applies to DEVMAP - the index used for accessing map entry, due to being a signed integer, causes the OOB writes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...