Lucene search
+L

43 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in GnuTLS. The gnutlspkcs11tokensetpin function, which is used to change the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS6.7AI score0.002EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/08 12:00 a.m.•12 views

EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2026-3122)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically f...

9.8CVSS7.1AI score0.01129EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
•added 2026/08/08 12:00 a.m.•14 views

EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2026-3067)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically f...

9.8CVSS7.1AI score0.01129EPSS
SaveExploits1References11
SUSE Linux
SUSE Linux
•added 2026/07/13 5:49 p.m.•13 views

Security update for gnutls

This update for gnutls fixes the following issues CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being case-sensitive bsc1263707. CVE-2026-5260: heap overread when processing extremely short premaster secret as part of an RSA key exchange...

8.3CVSS6.7AI score0.00945EPSS
SaveExploits1References24
RedHat Linux
RedHat Linux
•added 2026/06/29 3:13 p.m.•17 views

gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS5.7AI score0.002EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/06/29 10:17 a.m.•25 views

gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS5.7AI score0.002EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/06/29 2:54 a.m.•17 views

gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS5.7AI score0.002EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/06/25 6:37 p.m.•21 views

gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS5.7AI score0.002EPSS
SaveExploits0References6
OSV
OSV
•added 2026/06/16 2:16 a.m.•11 views

AZL-90149 CVE-2026-42014 affecting package gnutls for versions less than 3.8.13-1

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS6.6AI score0.002EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/16 2:16 a.m.•18 views

ALPINE-CVE-2026-42014

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS5.3AI score0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/16 2:16 a.m.•23 views

CVE-2026-42014

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS0.002EPSS
SaveExploits0References19
attackerkb
attackerkb
•added 2026/06/16 12:49 a.m.•11 views

CVE-2026-42014

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS5.8AI score0.002EPSS
SaveExploits0References19
Cvelist
Cvelist
•added 2026/06/16 12:49 a.m.•96 views

CVE-2026-42014 Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS0.002EPSS
SaveExploits0References19
RedHat Linux
RedHat Linux
•added 2026/05/02 10:26 p.m.•13 views

gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

6.6CVSS6.6AI score0.002EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2008-2232

Malware in sbrugna...

4.9CVSS7.3AI score0.00393EPSS
SaveExploits1References17
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-31593

Malicious code in bioql PyPI...

6CVSS6.6AI score0.00169EPSS
SaveExploits0References5
NVD
NVD
•added 2025/09/29 6:15 p.m.•14 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6CVSS0.00169EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/09/29 12:00 a.m.•6 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6.3AI score0.00169EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/29 12:00 a.m.•1 views

CVE-2025-57197: Improper Access Control

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6CVSS5.9AI score0.00169EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/29 12:00 a.m.•30 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6CVSS6.3AI score0.00169EPSS
SaveExploits0References3
Rows per page
Query Builder