Lucene search
+L

63 matches found

Kitploit
Kitploit
•added 2026/10/06 1:16 a.m.•18 views

PySCTChecker

PySCTChecker Description This is a Quick and dirty Python script for checking if a domain properly implements Certificate Transparency. If so, it is possible to observe how Certificate Transparency is implemented on the server side. When a server implements Certificate Transparency, it must offer...

6AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/14 7:58 a.m.•11 views

openssl: RPK server signature algorithm selection can dereference a missing certificate

A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, where only the private key with no certificate is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.6AI score0.01021EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/14 6:35 a.m.•15 views

openssl: RPK server signature algorithm selection can dereference a missing certificate

A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, where only the private key with no certificate is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.6AI score0.01021EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/08/28 4:46 p.m.•13 views

SUSE CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.8AI score0.01021EPSS
SaveExploits0References15
RedHat Linux
RedHat Linux
•added 2026/08/25 9:50 p.m.•14 views

openssl: RPK server signature algorithm selection can dereference a missing certificate

A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, where only the private key with no certificate is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.6AI score0.01021EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/08/25 4:57 p.m.•13 views

CVE-2026-14457

A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, where only the private key with no certificate is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.6AI score0.01021EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/25 1:17 p.m.•9 views

ALPINE-CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.8AI score0.01021EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/25 1:17 p.m.•11 views

CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS0.01021EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/25 12:58 p.m.•36 views

CVE-2026-14457 RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

0.01021EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/25 12:58 p.m.•40 views

CVE-2026-14457 RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/08/25 12:58 p.m.•15 views

CVE-2026-14457 RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

5.8AI score0.01021EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2026/08/25 12:58 p.m.•18 views

CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.8AI score0.01021EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/08/25 12:58 p.m.•10 views

CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.8AI score0.01021EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-14457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured...

7.5CVSS5.8AI score0.01021EPSS
SaveExploits0References3
OpenSSL
OpenSSL
•added 2026/08/25 12:00 a.m.•15 views

RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.8AI score0.01021EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2026/06/18 4:40 p.m.•14 views

SUSE-SU-2026:2459-1 Security update for strongswan

This update for strongswan fixes the following issues - CVE-2026-35328: infinite loop when handling supported versions TLS extension bsc1261712. - CVE-2026-35329: null pointer dereference when processing padding in PKCS7 bsc1261717. - CVE-2026-35330: integer underflow when handling EAP-SIM/AKA...

7.5CVSS5.4AI score0.00416EPSS
SaveExploits6References17
SUSE Linux
SUSE Linux
•added 2026/06/01 7:45 a.m.•57 views

Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-35328: infinite loop when handling supported versions TLS extension bsc1261712. CVE-2026-35329: null pointer dereference when processing padding in PKCS7 bsc1261717. CVE-2026-35330: integer underflow when handling EAP-SIM/AKA...

9.2CVSS5.8AI score
SaveExploits6References24
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•1 views

CVE-2026-7009: Improper Certificate Validation

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it fails to detect OCSP problems and instead wrongly consider the response as fine...

5.3CVSS5.8AI score0.00315EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•16 views

PT-2026-35897

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description When using the Certificate Status Request TLS extension, commonly known as OCSP stapling, to verify server certificate validity, the software fails to detect OCSP problems and incorrectly treats...

5.3CVSS5.2AI score0.00315EPSS
SaveExploits1References23
OSV
OSV
•added 2026/04/27 4:59 p.m.•10 views

SUSE-SU-2026:1637-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2026-35328: infinite loop when handling supported versions TLS extension bsc1261712. - CVE-2026-35329: null pointer dereference when processing padding in PKCS7 bsc1261717. - CVE-2026-35330: integer underflow when handling EAP-SIM/AKA...

5.2AI score
SaveExploits6References15
Rows per page
Query Builder