Lucene search
K

5 matches found

Veracode
Veracode
added 2025/04/15 6:26 a.m.4 views

Denial Of Service (DoS)

@apeleghq/asn1-der is vulnerable to Denial of ServiceDoS. The vulnerability is due to incorrect arithmetic in the numBitLen function due to the use of the operator causing negative results for values between 2³¹ and 2³²-1, and attackers can exploit this to trigger an infinite loop and cause a...

6.9CVSS6.6AI score0.00281EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/01/31 3:50 p.m.11 views

GSD-2023-1001800 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2018/07/11 12:29 a.m.1 views

CVE-2018-8319

A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library...

9.8CVSS5.8AI score0.14817EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/07/11 12:0 a.m.11 views

CVE-2018-8319

A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library...

9.3AI score0.14817EPSS
Exploits0References3
CVE
CVE
added 2018/07/11 12:0 a.m.69 views

CVE-2018-8319

CVE-2018-8319 concerns MSR JavaScript Cryptography Library (msrcrypto). Affects the library’s Elliptic Curve Cryptography (ECC) implementation, where multiple bugs in ECC could allow an attacker to glean information about a server’s private ECC key (key leakage) or craft invalid ECDSA signatures ...

9.8CVSS9.2AI score0.14817EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder