451 matches found
CVE-2026-21637
A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when "pskCallback" or "ALPNCallback" are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths tlsClientError and error, causing either...
MiracleLinux 7 : erlang-18.3.4.7-1.0.1.el7.AXS7 (AXSA:2017-2480:01)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-2480:01 advisory. The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt conten...
CVE-2026-21907
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers ssl-static-key-ciphers, reducing the confidentiality of on-path traffic communicated across the connection. These ciphers also do not support...
EUVD-2011-1773
Malware in sbrugna...
EUVD-2011-1185
Malware in sbrugna...
EUVD-2008-3268
Malware in sbrugna...
EUVD-2019-0131
Malware in sbrugna...
EUVD-2018-18904
Malware in sbrugna...
EUVD-2021-0936
Malware in sbrugna...
EUVD-2016-3216
Malware in sbrugna...
EUVD-2009-3907
Malware in sbrugna...
EUVD-2010-3842
Malware in sbrugna...
EUVD-2023-0809
Malicious code in bioql PyPI...
EUVD-2022-3867
Malicious code in bioql PyPI...
EUVD-2024-29723
Malicious code in bioql PyPI...
EUVD-2025-20335
Malicious code in bioql PyPI...
EUVD-2024-27460
Malicious code in bioql PyPI...
CVE-2024-31853
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.11. During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to...
CVE-2024-31854
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.11. During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check device's certificate common name against an expected value. This could allow an attacker to execute...
