Lucene search
+L

14 matches found

OSV
OSV
added 2025/11/21 3:59 p.m.8 views

JLSEC-2025-216 In Mbed TLS before 3.1.0, `psa_aead_generate_nonce` allows policy bypass or oracle-based decryption...

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.4AI score0.00923EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/21 3:59 p.m.7 views

JLSEC-2025-215 In Mbed TLS before 2.28.0 and 3.x before 3.1.0, `psa_cipher_generate_iv` and `psa_cipher_encrypt`...

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.8AI score0.01131EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2021-32221

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.01131EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-45450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer i...

7.5CVSS7.3AI score0.01131EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:36 a.m.4 views

SUSE CVE-2021-45451

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.5AI score0.00923EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:36 a.m.6 views

SUSE CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.5AI score0.01131EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/12/21 7:15 a.m.5 views

CVE-2021-45451

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.3AI score0.00923EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2021/12/21 7:15 a.m.7 views

CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.3AI score0.01131EPSS
SaveExploits0References8
OSV
OSV
added 2021/12/21 7:15 a.m.4 views

UBUNTU-CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS5.9AI score0.01131EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/12/21 12:0 a.m.5 views

ARM mbed TLS加密问题漏洞

ARM mbed TLS is a product from ARM UK that provides secure communication and encryption capabilities for mbed products. A security vulnerability exists in Mbed TLS versions prior to 2.28.0 and 3.0, which stems from the fact that psaciphergenerateiv and psacipherencrypt allow policy bypass or...

7.5CVSS7.2AI score0.01131EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/12/21 12:0 a.m.7 views

PT-2021-24239 · Mbed Tls +1 · Mbed Tls +1

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions prior to 3.1.0 Description: The issue allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application, specifically through the psa aead generate nonce...

9.8CVSS7.8AI score0.02569EPSS
SaveExploits3References24
CNNVD
CNNVD
added 2021/12/21 12:0 a.m.11 views

ARM mbed TLS 加密问题漏洞

ARM mbed TLS is a product from ARM UK that provides secure communication and encryption capabilities for mbed products. A security vulnerability exists in Mbed TLS versions prior to 3.1.0 that stems from psaaeadgeneratenonce allows policy bypass or oracle-based decryption that can be accessed by...

7.5CVSS7.2AI score0.00923EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/12/18 12:0 a.m.5 views

PT-2021-24238

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions prior to 2.28.0 Mbed TLS versions 3.x prior to 3.1.0 Description: The issue allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application, specifically...

7.5CVSS7.3AI score0.01131EPSS
SaveExploits0References32
OSV
OSV
added 2018/02/14 2:54 p.m.5 views

USN-3571-1 erlang vulnerabilities

It was discovered that the Erlang FTP module incorrectly handled certain CRLF sequences. A remote attacker could possibly use this issue to inject arbitrary FTP commands. This issue only affected Ubuntu 14.04 LTS. CVE-2014-1693 It was discovered that Erlang incorrectly checked CBC padding bytes. ...

9.8CVSS6.7AI score0.22098EPSS
SaveExploits8References5
Rows per page
Query Builder