OpenSSL-1_0_1g_CVE-2015-1791

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock()

A flaw was found in the Linux kernel’s TLS implementation net/tls/tlsdevice.c. The function getnetdevforsock is invoked during setsockopt, which is not executed under RCU Read-Copy-Update protection. It previously used skdstgetsk-dev, which can lead to a use-after-free UAF if the sk’s destination...

CVE-2014-4191

The TLS implementation in EMC RSA BSAFE-C Toolkits aka Share for C and C++ sends a long series of random bytes during use of the DualECDRBG algorithm, which makes it easier for remote attackers to obtain plaintext from TLS sessions by recovering the algorithm's inner state, a different issue than...

EUVD-2013-1655

Malware in sbrugna...

EUVD-2019-5100

Malware in sbrugna...

EUVD-2020-29134

Malware in sbrugna...

EUVD-2014-4122

Malware in sbrugna...

EUVD-2020-5859

Malware in sbrugna...

EUVD-2013-0451

Malware in sbrugna...

EUVD-2016-5379

Malware in sbrugna...

EUVD-2013-6430

Malware in sbrugna...

EUVD-2005-3087

Malware in sbrugna...

EUVD-2015-4478

Malware in sbrugna...

EUVD-2014-4120

Malware in sbrugna...

EUVD-2018-0139

Malware in sbrugna...

EUVD-2022-3089

Malicious code in bioql PyPI...

PT-2025-22967 · Fortinet · Fortinet Ssl/Tls Implementation

Name of the Vulnerable Software and Affected Versions: Fortinet SSL/TLS Implementation affected versions not specified Description: The issue concerns a vulnerability in the SSL/TLS implementation. No specific details about the nature of the vulnerability, affected devices, or real-world incident...

CVE-2005-3087

The SecureW2 3.0 TLS implementation uses weak random number generators rand and srand from system time during generation of the pre-master secret PMS, which makes it easier for attackers to guess the secret and decrypt sensitive data...

CVE-2025-21605

A flaw was found in the Redis server. This flaw allows an unauthenticated client to cause an unlimited growth of output buffers until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients see client-output-buffer-limit...

CVE-2022-49094

CVE-2022-49094 affects the Linux kernel net/tls decrypt_internal path handling AES128-CCM. The bug arises because tls_ctx->rx.iv is 12 bytes while crypto_aead_ivsize("ccm(aes)") returns 16, causing a slab-out-of-bounds read during memcpy. The described fixes replace the call to crypto_aead_ivs...