CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

709 matches found

UbuntuCve•added 2026/02/05 6:16 p.m.•20 views

CVE-2025-68121

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the...

10CVSS6.8AI score0.00915EPSS

SaveExploits1References3

OSV•added 2026/02/05 6:16 p.m.•16 views

UBUNTU-CVE-2025-68121

10CVSS7.2AI score0.00915EPSS

SaveExploits1References4

OSV•added 2026/02/05 5:48 p.m.•15 views

CVE-2025-68121 Unexpected session resumption in crypto/tls

9.1CVSS6.9AI score

SaveExploits0References7

attackerkb•added 2026/02/05 5:48 p.m.•13 views

CVE-2025-68121

5.4AI score0.00915EPSS

SaveExploits1References5Affected Software1

EUVD•added 2026/02/05 5:48 p.m.•16 views

EUVD-2025-206854

4.8CVSS5.4AI score0.00915EPSS

SaveExploits1References4

AlpineLinux•added 2026/02/05 5:48 p.m.•31 views

CVE-2025-68121

10CVSS7.2AI score0.00915EPSS

SaveExploits1

Debian CVE•added 2026/02/05 5:48 p.m.•23 views

CVE-2025-68121

10CVSS7.2AI score0.00915EPSS

SaveExploits1

Vulnrichment•added 2026/02/05 5:48 p.m.•14 views

CVE-2025-68121 Unexpected session resumption in crypto/tls

7.2AI score0.00915EPSS

SaveExploits1References4

Cvelist•added 2026/02/05 5:48 p.m.•67 views

CVE-2025-68121 Unexpected session resumption in crypto/tls

0.00915EPSS

SaveExploits1References4

CVE•added 2026/02/05 5:48 p.m.•405 views

CVE-2025-68121

CVE-2025-68121 affects crypto/tls in Go where session resumption can succeed if the underlying Config is mutated between the initial and resumed handshake (e.g., after Config.Clone or GetConfigForClient mutates ClientCAs/RootCAs). The connected advisories tie this issue to the same CVE across mul...

10CVSS7.2AI score0.00915EPSS

SaveExploits1References4Affected Software1

Snyk•added 2026/02/05 5:23 p.m.•15 views

Improper Certificate Validation

Overview std/crypto/tls is a Go standard library package std/crypto/tls Affected versions of this package are vulnerable to Improper Certificate Validation. Go Vulnerability Report: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated betwe...

10CVSS8.4AI score0.00915EPSS

SaveExploits1References4

OSV•added 2026/02/05 5:23 p.m.•41 views

GO-2026-4337 Unexpected session resumption in crypto/tls

10CVSS7.2AI score0.00915EPSS

SaveExploits1References3

CNNVD•added 2026/02/05 12:00 a.m.•17 views

Google Go 安全漏洞

Google Go is a static, strongly typed, compiled, concurrent programming language developed by Google Inc. It also features garbage collection. There is a security vulnerability in Google Go. This vulnerability arises during the crypto/tls session resumption process. If the ClientCAs or RootCAs...

10CVSS6.9AI score0.00915EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2026/02/05 12:00 a.m.•3 views

CVE-2025-68121: Improper Certificate Validation

10CVSS5.8AI score0.00915EPSS

SaveExploits1References1

FreeBSD•added 2026/02/05 12:00 a.m.•21 views

oauth2-proxy -- multiple vulnerabilities

10CVSS7.3AI score0.00915EPSS

SaveExploits1

OSV•added 2026/01/30 5:14 p.m.•15 views

CLEANSTART-2026-BA37192 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers

Multiple security vulnerabilities affect the nginx package. When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. See references for individual vulnerabili...

9.8CVSS7AI score0.99999EPSS

SaveExploits47References43

OSV•added 2026/01/30 5:13 p.m.•16 views

CLEANSTART-2026-XB16901 When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers

9.8CVSS7AI score0.99999EPSS

SaveExploits47References43

Tenable Nessus•added 2026/01/26 12:00 a.m.•10 views

openSUSE 16 Security Update : go1.25 (openSUSE-SU-2026:20085-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20085-1 advisory. Update to go1.25.6 released 2026-01-15 bsc1244485 Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the...

10CVSS7.2AI score0.02326EPSS

SaveExploits2References19

Tenable Nessus•added 2026/01/16 12:00 a.m.•9 views

MiracleLinux 7 : java-1.7.0-openjdk-1.7.0.201-2.6.16.1.0.1.el7.AXS7 (AXSA:2019-3680:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3680:01 advisory. OpenJDK: Improper field access checks Hotspot, 8199226 CVE-2018-3169 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction JNDI, 81991...

8.3CVSS6.8AI score0.07156EPSS

SaveExploits3References7

Tenable Nessus•added 2026/01/13 12:00 a.m.•2 views

MiracleLinux 9 : nginx-1.20.1-22.el9.ML.1 (AXSA:2025-10304:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10304:01 advisory. nginx: TLS Session Resumption Vulnerability CVE-2025-23419 Tenable has extracted the preceding description block directly from the MiracleLinux security...

5.3CVSS6.4AI score0.02795EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by