Design/Logic Flaw

DISPUTED ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation. NOTE: the vendor does not consider this a vulnerability because the report is only about use of certificates at the application layer not the transport layer and "Certificates are exchanged in a controlled fashion between...

CVE-2023-22812

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data...

PT-2023-18710 · Sandisk · Sandisk Privateaccess

Name of the Vulnerable Software and Affected Versions: SanDisk PrivateAccess versions prior to 6.4.9 Description: The issue concerns the support of insecure TLS 1.0 and TLS 1.1 protocols, making the system susceptible to man-in-the-middle attacks. This compromises the confidentiality and integrit...

PT-2023-14715

Name of the Vulnerable Software and Affected Versions ComponentSpace.Saml2 version 4.4.0 Description The issue concerns missing SSL certificate validation at the application layer. According to the vendor, this is not considered a vulnerability because certificates are exchanged between trusted...

Western Digital SanDisk PrivateAccess 加密问题漏洞

Western Digital SanDisk PrivateAccess is a secure access software from Western Digital. A security vulnerability exists in Western Digital SanDisk PrivateAccess versions prior to 6.4.9 that stems from the system's support for the insecure TLS 1.0 and TLS 1.1 protocols, which are susceptible to...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2023-28431 Frontier's modexp precompile is slow for even modulus

Frontier is an Ethereum compatibility layer for Substrate. Frontier's modexp precompile uses num-bigint crate under the hood. In the implementation prior to pull request 1017, the cases for modulus being even and modulus being odd are treated separately. Odd modulus uses the fast Montgomery...

CVE-2023-28431 Frontier's modexp precompile is slow for even modulus

Frontier is an Ethereum compatibility layer for Substrate. Frontier's modexp precompile uses num-bigint crate under the hood. In the implementation prior to pull request 1017, the cases for modulus being even and modulus being odd are treated separately. Odd modulus uses the fast Montgomery...

Medium: sendmail

Issue Overview: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can...

CVE-2023-1261

Missing MAC layer security in Silicon Labs Wi-SUN SDK v1.5.0 and earlier allows malicious node to route malicious messages through network...

CVE-2023-1262

Missing MAC layer security in Silicon Labs Wi-SUN Linux Border Router v1.5.2 and earlier allows malicious node to route malicious messages through network...

Code injection

Missing MAC layer security in Silicon Labs Wi-SUN Linux Border Router v1.5.2 and earlier allows malicious node to route malicious messages through network...

Design/Logic Flaw

Missing MAC layer security in Silicon Labs Wi-SUN SDK v1.5.0 and earlier allows malicious node to route malicious messages through network...

CVE-2023-1262

CVE-2023-1262 concerns Silicon Labs Wi-SUN Linux Border Router (versions 1.5.2 and earlier) with a missing MAC-layer security vulnerability. The root cause is insufficient MAC-layer protection that enables a malicious node to route malicious messages through the network. Documented impact is netw...

CVE-2023-1262 Missing MAC layer security in Wi-SUN Linux Border Router

Missing MAC layer security in Silicon Labs Wi-SUN Linux Border Router v1.5.2 and earlier allows malicious node to route malicious messages through network...

CVE-2023-1262 Missing MAC layer security in Wi-SUN Linux Border Router

Missing MAC layer security in Silicon Labs Wi-SUN Linux Border Router v1.5.2 and earlier allows malicious node to route malicious messages through network...

CVE-2023-1261 Missing MAC layer security in Wi-SUN SDK

Missing MAC layer security in Silicon Labs Wi-SUN SDK v1.5.0 and earlier allows malicious node to route malicious messages through network...

CVE-2023-1261

Silicon Labs Wi-SUN SDK is affected (versions 1.5.0 and earlier) by a vulnerability caused by missing MAC-layer security that allows a malicious node to route malicious messages through a network. The CVE entry notes the issue but public sources describe the impact as enabling message routing thr...

Silicon Labs Wi-SUN SDK 安全漏洞

Silicon Labs Wi-SUN SDK is an industry-leading software stack and development tool for Wi-SUN application development from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs Wi-SUN SDK v1.5.0 and earlier versions, which stems from an issue with the MAC layer security of the...

Medium: kernel

Issue Overview: A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service. CVE-2022-4129 A...