AZL-44487 CVE-2022-41717 affecting package podman for versions less than 5.6.1-2

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate...

CVE-2020-14002

PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client...

PT-2020-13830 · Simon Tatham +1 · Putty +1

Name of the Vulnerable Software and Affected Versions: PuTTY versions 0.68 through 0.73 Description: The issue allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client, due to an Observable Discrepancy leading to an...

RSA Key Manager SQL injection

It's possible to manipilate key cache...

CVE-2010-4685

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

Design/Logic Flaw

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

CVE-2010-4685

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

RSA Key Manager version 1.5.x SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= RSA Key Manager version 1.5.x SQL Injection Vulnerability ========================================================= CVE: CVE-2010-1904 Product: RSA Key Manager Vendor: EMC/RSA Vulnerabl...

PT-1997-1171 · Majorcool · Majorcool Mj Key Cache

Name of the Vulnerable Software and Affected Versions: MajorCool mj key cache affected versions not specified Description: The issue allows local users to modify files via a symlink attack. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...