Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4085

Malicious code in bioql PyPI...

7.5CVSS6.3AI score0.01027EPSS
Exploits0References3
OSV
OSV
added 2025/02/12 7:20 p.m.7 views

GHSA-29C6-3HCJ-89CF go-crypto-winnative BCryptGenerateSymmetricKey memory leak

Calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time...

7.5CVSS7.4AI score0.01027EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/02/12 7:20 p.m.17 views

go-crypto-winnative BCryptGenerateSymmetricKey memory leak

Calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time...

7.5CVSS6.7AI score0.01027EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2025/02/12 6:15 p.m.13 views

CVE-2025-25199

go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41...

7.5CVSS0.01027EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Microsoft go-crypto-winnative 安全漏洞

Microsoft go-crypto-winnative is a library from Microsoft Corporation USA. A security vulnerability exists in go-crypto-winnative, which stems from a call to cng.TLS1PRF that does not release the key handle, creating a small memory leak each time...

7.5CVSS6.3AI score0.01027EPSS
Exploits0References2
NVD
NVD
added 2025/01/08 12:15 a.m.9 views

CVE-2018-4301

This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp...

9.8CVSS0.00585EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/01/07 11:26 p.m.19 views

CVE-2018-4301

This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp...

0.00585EPSS
Exploits1References1
CVE
CVE
added 2025/01/07 11:26 p.m.54 views

CVE-2018-4301

CVE-2018-4301 affects GemaltoKeyHandle.cpp in Smart Card Services. Root cause: a potential stack-based buffer overflow. Impact: high (confidentiality, integrity, and availability at risk) per CVSS metrics. A fix is provided in SCSSU-201801; affected software is Smart Card Services (GemaltoKeyHand...

9.8CVSS7.2AI score0.00585EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/07 11:26 p.m.4 views

CVE-2018-4301

This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp...

7.4AI score0.00585EPSS
Exploits1References1
Rows per page
Query Builder