991 matches found
CVE-2022-2576
In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest. Especially, if used with certificate based cipher suites, that results in message amplification DDoS other peer...
Denial Of Service (DoS)
mbedtls is vulnerable to denial of service. The vulnerability exists through a buffer overread when the dtls server with MBEDTLSSSLDTLSCLIENTPORTREUSE in use receives a ClientHello message with a cookie whose declared length exceeds the end of the allocated buffer which allows an attacker to caus...
DEBIAN-CVE-2022-35409
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information...
Mbed TLS 缓冲区错误漏洞
Mbed TLS is an open source, portable, easy-to-use, readable and flexible SSL library. A buffer error vulnerability exists in Mbed TLS versions prior to 2.28.2 and 3.x versions prior to 3.2.0, which stems from the fact that in certain configurations, an unauthenticated attacker can send an invalid...
PT-2022-22810
Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 2.28.1 Mbed TLS versions 3.x prior to 3.2.0 Description An issue was discovered in Mbed TLS where an unauthenticated attacker can send an invalid ClientHello message to a DTLS server, causing a heap-based buffer...
Malicious code in hello-oauth-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3dba086e4539ba830b04b5d911a532cb91957fd5cbdf6a5e6793e6d1953d72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3597 Malicious code in hello-oauth-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3dba086e4539ba830b04b5d911a532cb91957fd5cbdf6a5e6793e6d1953d72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hello-kubeless (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6dd647aac06959f0ea32c8a25cfc7b2bc21f85b0f841998e12f68428606597d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bfs-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08afca1626800ca0dd2df0ebca0d8eee030193fa1ca08a8d21115db0d5bcbc6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
This World Password Day consider ditching passwords altogether
Did you know that May 5, 2022, is World Password Day?1 Created by cybersecurity professionals in 2013 and designated as the first Thursday every May, World Password Day is meant to foster good password habits that help keep our online lives secure. It might seem strange to have a day set aside to...
HorizontCMS Code Issues Vulnerabilities
HorizontCMS is a customer relationship management web platform for individual developers. A security vulnerability exists in HorizontCMS before 1.0.0-beta.3, which can be exploited by attackers to upload .htaccess and .hello files by using the media file upload feature...
CVE-2021-28428
File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and .hello files using the Media Files upload functionality. The original file upload vulnerability CVE-2020-27387 was remediated by restricting the PHP extensions; however, we confirmed that the filter was...
HorizontCMS 代码问题漏洞
HorizontCMS is a customer relationship management web platform for individual developers. A security vulnerability exists in HorizontCMS before 1.0.0-beta.3, which can be exploited by attackers to upload .htaccess and .hello files by using the media file upload feature...
UBUNTU-CVE-2022-26129
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parsehellosubtlv, parseihusubtlv, and parseupdatesubtlv in babeld/message.c...
PT-2022-4363 · Frrouting +3 · Frrouting +3
Name of the Vulnerable Software and Affected Versions: FRRouting versions through 8.1.0 Description: The issue is related to buffer overflow vulnerabilities due to incorrect checks on the subtlv length in the functions parse hello subtlv, parse ihu subtlv, and parse update subtlv in...
Fortinet FortiGate Input Validation Error Vulnerability
Fortinet FortiGate, a next-generation firewall product developed by Fortinet, is vulnerable to an input validation error that could be exploited to disclose sensitive information via SNI client Hello TLS packets...
CVE-2020-15936
A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and below, version 5.6.13 and below allows attacker to disclose sensitive information via SNI Client Hello TLS packets...
Input validation
A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and below, version 5.6.13 and below allows attacker to disclose sensitive information via SNI Client Hello TLS packets...
CVE-2020-15936
A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and below, version 5.6.13 and below allows attacker to disclose sensitive information via SNI Client Hello TLS packets...
CVE-2020-15936
Fortinet FortiGate has a CVE-2020-15936 vulnerability due to improper input validation that enables disclosure of sensitive information via SNI Client Hello TLS packets. Affected versions are FortiGate 6.4.3 and below, 6.2.5 and below, 6.0.11 and below, and 5.6.13 and below. The issue is document...