Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/27 11:30 a.m.1 views

EUVD-2025-36160

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid...

8.2CVSS6.6AI score0.00026EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2025/07/23 5:25 p.m.2 views

golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

A flaw was found in the golang-jwt package. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by ParseWithClaims return both...

3.1CVSS7.1AI score0.0006EPSS
Exploits0References6
OSV
OSV
added 2024/11/04 10:15 p.m.2 views

AZL-52210 CVE-2024-51744 affecting package prometheus for versions less than 2.45.4-12

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

3.1CVSS6.5AI score0.0006EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/03/05 6:15 p.m.1 views

keylime: Attestation failure when the quote's signature does not validate

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted...

2.8CVSS5.7AI score0.00028EPSS
Exploits0References5
PyPA
PyPA
added 2023/07/19 7:15 p.m.4 views

PYSEC-2023-128

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted...

2.8CVSS6.5AI score0.00028EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2020/10/21 2:15 a.m.9 views

CVE-2020-26895

Prior to 0.10.0-beta, LND Lightning Network Daemon would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation e.g., routing node, payment-receiver,...

5.3CVSS0.00148EPSS
Exploits0References3
Rows per page
Query Builder