Lucene search
K

8 matches found

CNNVD
CNNVD
added 2025/11/21 12:0 a.m.5 views

RNP 安全漏洞

RNP is a C++ library open-sourced by RNP. A security vulnerability exists in RNP version 0.18.0 that stems from an uninitialized symmetric session key used in PKESK packets, which could lead to a complete breach of confidentiality...

8.7CVSS6.3AI score0.00043EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-5762

Malware in sbrugna...

7.1CVSS6.4AI score0.00316EPSS
Exploits0References5
OSV
OSV
added 2025/04/22 6:14 p.m.9 views

GO-2025-3635 In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters in github.com/cilium/cilium

In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters in github.com/cilium/cilium...

4CVSS4.3AI score0.00014EPSS
Exploits0References3
OSV
OSV
added 2025/04/21 4:17 p.m.14 views

GHSA-5VXX-C285-PCQ4 In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters

Impact When using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. Patches This issue has been patched in...

4CVSS6.6AI score0.00014EPSS
Exploits0References5
CVE
CVE
added 2025/04/21 3:34 p.m.213 views

CVE-2025-32793

CVE-2025-32793 affects Cilium’s eBPF dataplane when WireGuard transparent encryption is enabled. Versions 1.15.0–1.15.15, 1.16.0–1.16.8, and 1.17.0–1.17.2 are vulnerable to a race condition where packets from a terminating endpoint may leave the source node unencrypted. The issue is fixed in 1.15...

4CVSS4.2AI score0.00014EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2025/03/22 12:0 a.m.124 views

CVE-2025-30472

CVE-2025-30472 is a vulnerability in the Corosync library (through 3.1.9) that enables a stack-based buffer overflow when encryption is disabled or the attacker knows the key and processes a large UDP packet. Connected sources specify affected contexts (Corosync 3.1.x) and note fixes: IBM/Db2 bul...

9.8CVSS7.4AI score0.00157EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2018/10/10 12:0 a.m.85 views

CVE-2018-16758

CVE-2018-16758 affects the tinc VPN daemon up to version 1.0.34. The root cause is missing message authentication in the meta-protocol, enabling a man-in-the-middle to disable VPN packet encryption. Public sources (NVD, CNVD) describe a MITM-based impact that decrypts or disrupts traffic. Fedora ...

5.9CVSS5.5AI score0.0011EPSS
Exploits0References4Affected Software1
exploitpack
exploitpack
added 2005/11/11 12:0 a.m.19 views

Snort 2.4.2 - Back Orifice Pre-Preprocessor Remote (3)

Snort 2.4.2 - Back Orifice Pre-Preprocessor Remote 3 / snort 2.4.0 - 2.4.2 Back Orifice Pre-Preprocessor Remote Exploit by Russell Sanford [email protected] - www.code-junkies.net include include include include include include include include include include define buffsize 1056 define COOKIE...

7.5AI score
Exploits0
Rows per page
Query Builder