598 matches found
GHSA-65CH-62R8-G69G node-forge is vulnerable to ASN.1 OID Integer Truncation
Summary MITRE-Formatted CVE Description An Integer Overflow CWE-190 vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwis...
CVE-2025-66030: Integer Overflow or Wraparound
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be...
CVE-2025-65647
Insecure Direct Object Reference IDOR in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter...
CVE-2025-65647: Authorization Bypass Through User-Controlled Key
Insecure Direct Object Reference IDOR in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter...
Siemens SIMATIC S7-1500 Double Free (CVE-2025-32988)
A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name SAN entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1deletestructure on an ASN.1 node it do...
EUVD-2025-138003
Malicious code in flights-lutg-oid npm...
Astra Linux – Vulnerability in gnutls28
A flaw was discovered in GnuTLS. There exists a double-free vulnerability in GnuTLS due to incorrect handling of ownership in the export logic of Subject Alternative Name SAN entries that contain an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1deletestructure on an...
Amazon Linux 2 : squid, --advisory ALAS2-2025-3027 (ALAS-2025-3027)
The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3027 advisory. Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c. CVE-2025-59362...
EUVD-2008-5839
Malware in sbrugna...
EUVD-2004-0575
Malware in sbrugna...
EUVD-2008-7118
Malware in sbrugna...
EUVD-2001-0871
Malware in sbrugna...
EUVD-2012-4014
Malware in sbrugna...
EUVD-2020-12545
Malware in sbrugna...
EUVD-2008-3525
Malware in sbrugna...
EUVD-2018-0984
Malware in sbrugna...
EUVD-2017-1556
Malware in sbrugna...
EUVD-2017-18282
Malware in sbrugna...