Lucene search
K

60 matches found

OSV
OSV
added 2025/11/21 11:15 p.m.6 views

CVE-2025-11934

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...

2.7CVSS6.7AI score
Exploits0References2
CVE
CVE
added 2025/11/21 10:12 p.m.566 views

CVE-2025-11934

CVE-2025-11934 concerns wolfSSL’s TLS 1.3 CertificateVerify signature algorithm negotiation. The vulnerability stems from improper input validation that can downgrade the negotiated signature algorithm (e.g., client supports ECDSA P521 but server accepts and uses ECDSA P256), potentially weakenin...

2.7CVSS6.4AI score0.00147EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2025/11/21 10:12 p.m.6 views

CVE-2025-11934

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...

2.7CVSS5.2AI score0.00147EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-20159

Malware in sbrugna...

8.3CVSS8.7AI score0.00822EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2020-20160

Malware in sbrugna...

8.3CVSS8.7AI score0.00822EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-19626

Malicious code in bioql PyPI...

7.5CVSS6.4AI score0.00218EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-0450

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00835EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-36217

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00979EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/07/03 1:20 p.m.5 views

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

7.5CVSS7.3AI score0.00218EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/07/03 12:0 a.m.5 views

Dell NetWorker Algorithm Downgrade (DSA-2025-268)

The version of Dell EMC NetWorker installed on the remote Windows host is affected by a vulnerability. Dell NetWorker, versions prior to 19.11.0.5 or 19.12.x through 19.12.0.1, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated...

7.5CVSS5.6AI score0.00218EPSS
Exploits0References2
NVD
NVD
added 2025/07/01 2:15 p.m.6 views

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

7.5CVSS0.00218EPSS
Exploits0References1
OSV
OSV
added 2025/07/01 2:15 p.m.3 views

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

7.5CVSS5.8AI score0.00218EPSS
Exploits0References1
CVE
CVE
added 2025/07/01 1:12 p.m.20 views

CVE-2025-36582

CVE-2025-36582 concerns Dell NetWorker, versions 19.12.0.1 and earlier, with a vulnerability titled “Selection of Less-Secure Algorithm During Negotiation (Algorithm Downgrade).” An unauthenticated attacker with remote access could potentially disclose information due to selecting a weaker algori...

7.5CVSS6.7AI score0.00218EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/01 1:12 p.m.3 views

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

4.8CVSS7.2AI score0.00218EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/01 1:12 p.m.5 views

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

4.8CVSS0.00218EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.4 views

PT-2025-27526 · Dell · Dell Networker

Name of the Vulnerable Software and Affected Versions: Dell NetWorker versions 19.12.0.1 and prior Description: The issue is related to a Selection of Less-Secure Algorithm During Negotiation, also known as an 'Algorithm Downgrade'. This could allow an unauthenticated attacker with remote access ...

7.5CVSS6.2AI score0.00218EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/23 5:0 a.m.10 views

CVE-2023-51842

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

7.5CVSS6.8AI score0.00835EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 11:0 p.m.6 views

CVE-2022-33173

An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead...

7.5CVSS7AI score0.00979EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/01 12:0 a.m.13 views

Synology DiskStation Manager Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-27652)

Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager DSM before 6.2.3-25426-2 allows man-in-the- middle attackers to spoof servers and obtain sensitive information via unspecified vectors. This plugin only works with Tenable.ot. Please visit...

8.3CVSS8.2AI score0.00822EPSS
Exploits1References3
OSV
OSV
added 2024/01/29 9:30 p.m.23 views

GHSA-WPXW-5XFM-X22V MeshCentral algorithm-downgrade issue

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

7.5CVSS7.4AI score0.00835EPSS
Exploits1References6
Rows per page
Query Builder