Lucene search
+L

185 matches found

NVD
NVD
added 2024/09/27 3:15 p.m.16 views

CVE-2024-44910

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...

7.5CVSS0.00535EPSS
Exploits1References2
NVD
NVD
added 2024/09/27 3:15 p.m.27 views

CVE-2024-44911

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...

7.5CVSS0.00517EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 a.m.13 views

CVE-2024-44911

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...

7.5AI score0.00517EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 a.m.12 views

CVE-2024-44910

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...

7.5AI score0.00535EPSS
Exploits1References2
CVE
CVE
added 2024/09/27 12:0 a.m.56 views

CVE-2024-44911

NASA CryptoLib v1.3.0 is affected by an Out‑of‑Bounds read in the TC subsystem (crypto_tc.c). The CVSS data shows NETWORK attack vector, LOW complexity, NONE prerequisites, with no user interaction, and a HIGH availability impact (I and A are notable; C and I are None, C=A). No exploitation detai...

7.5CVSS7.5AI score0.00517EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/09/27 12:0 a.m.20 views

CVE-2024-44911

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...

0.00517EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/27 12:0 a.m.17 views

CVE-2024-44910

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...

0.00535EPSS
Exploits1References2
CVE
CVE
added 2024/09/27 12:0 a.m.55 views

CVE-2024-44910

NASA CryptoLib v1.3.0 contains an Out-of-Bounds read in the AOS subsystem (crypto_aos.c). The vulnerability is described across multiple feeds, with CVSSv3.1 metrics indicating Network attack vector, low attack complexity, no privileges required, and a HIGH impact on availability. No specific rem...

7.5CVSS7.5AI score0.00535EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 a.m.10 views

CVE-2024-44912

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...

7.5AI score0.00489EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/27 12:0 a.m.22 views

CVE-2024-44912

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...

0.00489EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/09/27 12:0 a.m.5 views

PT-2024-31298 · Nasa · Nasa Cryptolib

Name of the Vulnerable Software and Affected Versions: NASA CryptoLib version 1.3.0 Description: The issue is related to an Out-of-Bounds read via the TC subsystem. Specifically, the problem is identified in the crypto aos.c file. Recommendations: For NASA CryptoLib version 1.3.0, consider...

7.5CVSS6.8AI score0.00517EPSS
Exploits0References8
CVE
CVE
added 2024/09/27 12:0 a.m.59 views

CVE-2024-44912

CVE-2024-44912 affects NASA CryptoLib v1.3.0, with an Out-of-Bounds read in the TM subsystem (crypto_tm.c). The vulnerability’s impact per the provided data is Availability (A) impact high, no confidentiality or integrity impact, and network attack vector with no user interaction required. The co...

7.5CVSS7.5AI score0.00489EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/09/27 12:0 a.m.10 views

CVE-2024-44910

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...

7.5CVSS7.2AI score0.00535EPSS
Exploits1References4
OSV
OSV
added 2024/09/27 12:0 a.m.12 views

CVE-2024-44911

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...

7.5CVSS7.5AI score0.00517EPSS
Exploits0References4
OSV
OSV
added 2024/09/27 12:0 a.m.14 views

CVE-2024-44912

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...

7.5CVSS7.2AI score0.00489EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.7 views

The vulnerability of the SAP CommonCryptoLib library, related to pointer dereferencing errors, allows a perpetrator to trigger a service failure.

The vulnerability of the SAP CommonCryptoLib library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

7.8CVSS7.1AI score0.00622EPSS
Exploits0References3Affected Software8
OSV
OSV
added 2023/03/15 2:15 p.m.9 views

CVE-2023-26084

The armv8decaesgcmfull API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack. This occurs because of an improperly initialized variable...

3.7CVSS5.8AI score0.00362EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/15 12:0 a.m.11 views

PT-2023-20477 · Arm · Arm Aarch64Cryptolib

Name of the Vulnerable Software and Affected Versions: Arm AArch64cryptolib versions before 86065c6 Description: The issue concerns the armv8 dec aes gcm full API, which fails to verify the authentication tag of AES-GCM protected data. This failure is due to an improperly initialized variable,...

3.7CVSS7.4AI score0.00362EPSS
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:24 p.m.3 views

Malicious code in cryptolib-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aadad8a99682bbe6501c9891001de7c4e5c6a2519150152340dbc3c4b2c8f53c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:24 p.m.5 views

MAL-2022-2257 Malicious code in cryptolib-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aadad8a99682bbe6501c9891001de7c4e5c6a2519150152340dbc3c4b2c8f53c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Rows per page
Query Builder