Lucene search
K

15 matches found

OSV
OSV
added 2025/02/12 6:15 p.m.4 views

AZL-79122 CVE-2025-25199 affecting package golang 1.25.7-1

go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41...

7.5CVSS7.3AI score0.01027EPSS
Exploits0References1
OSV
OSV
added 2025/01/15 12:15 a.m.0 views

CVE-2025-22997

A stored cross-site scripting XSS vulnerability in the prftablecontent component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the desc parameter...

4.8CVSS5.9AI score
Exploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.2 views

Linksys E5600 安全漏洞

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys USA. A cross-site scripting vulnerability exists in Linksys E5600 Ver.1.1.0.26. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...

4.8CVSS6AI score0.00168EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.2 views

PT-2025-4761 · Linksys · Linksys E5600 Router

Name of the Vulnerable Software and Affected Versions: Linksys E5600 Router version 1.1.0.26 Description: A stored cross-site scripting XSS issue in the prf table content component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the desc parameter. Th...

4.8CVSS5.1AI score0.00168EPSS
Exploits2References6
Oracle linux
Oracle linux
added 2019/12/11 12:0 a.m.81 views

nss, nss-softokn, nss-util security update

nss 3.44.0-7 - Increase timeout on sslgtest so that slow platforms can complete when running on a busy system. 3.44.0-6 - back out out-of-bounds patch patch for nss-softokn. - Fix segfault on empty or malformed ecdh keys 1777712 3.44.0-5 - Fix out-of-bounds write in NSCEncryptUpdate 1775910...

8.8CVSS1.2AI score0.00939EPSS
Exploits2
FreeBSD
FreeBSD
added 2018/05/16 12:0 a.m.29 views

strongswan -- Fix Denial-of-Service Vulnerability strongSwan (CVE-2018-10811, CVE-2018-5388)

strongSwan security team reports: A denial-of-service vulnerability in the IKEv2 key derivation was fixed if the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF which is not FIPS-compliant. So this should only affect very specific setups, but in such configurations all...

7.5CVSS4.4AI score0.13646EPSS
Exploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2016/09/26 6:10 p.m.37 views

Security update for MozillaFirefox, mozilla-nss (important)

MozillaFirefox was updated to version 49.0 boo999701 - New features Updated Firefox Login Manager to allow HTTPS pages to use saved HTTP logins. Added features to Reader Mode that make it easier on the eyes and the ears Improved video performance for users on systems that support SSE3 without...

7.5CVSS0.04132EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.25 views

openSUSE Security Update : mozilla-nss (openSUSE-SU-2013:1539-1)

Mozilla NSS was updated to 3.15.2 bnc842979 - Support for AES-GCM ciphersuites that use the SHA-256 PRF - MD2, MD4, and MD5 signatures are no longer accepted for OCSP or CRLs - Add PK11CipherFinal macro - sizeof used incorrectly - nssutilReadSecmodDB leaks memory - Allow...

5CVSS7.1AI score0.03954EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2013/11/17 12:0 a.m.36 views

SuSE 11.2 / 11.3 Security Update : Mozilla NSS (SAT Patch Numbers 8484 / 8485)

"Mozilla NSS has been updated to 3.15.2 bnc847708 bringing various features and bugfixes : The main feature is TLS 1.2 support and its dependent algorithms. - Support for AES-GCM ciphersuites that use the SHA-256 PRF - MD2, MD4, and MD5 signatures are no longer accepted for OCSP or CRLs - Add...

5CVSS6.9AI score0.03954EPSS
Exploits0References3
CVE
CVE
added 2008/12/26 5:8 p.m.48 views

CVE-2008-5722

SAWStudio 3.9i is affected by a buffer overflow in the PREFERENCES STRUCT value stored in a .prf file, which can cause an application crash and may allow arbitrary code execution. The issue is user-assisted remote in nature and is documented in CVE-2008-5722 with the impact described as denial of...

10CVSS7.9AI score0.07708EPSS
Exploits1References4Affected Software1
seebug.org
seebug.org
added 2008/12/25 12:0 a.m.13 views

SAWStudio 3.9i (prf File) Local Buffer Overflow PoC

No description provided by source. SAWStudio 3.9i prf file Buffer overflow Poc By:Encrypt3d.M!nd Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends when you import Prefernces File "prf file" contain long characters an overflow will occure,and the registers will be just like this:...

7.1AI score
Exploits0
0day.today
0day.today
added 2008/12/24 12:0 a.m.38 views

SAWStudio 3.9i (prf File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== SAWStudio 3.9i prf File Local Buffer Overflow PoC =================================================== SAWStudio 3.9i prf file Buffer overflow Poc By:Encrypt3d.M!nd Greetz:-=Mizo=-,L!0N,El...

7AI score
Exploits0
Exploit DB
Exploit DB
added 2008/12/24 12:0 a.m.34 views

SAWStudio 3.9i - '.prf' Local Buffer Overflow (PoC)

SAWStudio 3.9i prf file Buffer overflow Poc By:Encrypt3d.M!nd Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends when you import Prefernces File "prf file" contain long characters an overflow will occure,and the registers will be just like this: EAX:41414141 ECX:00000000...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/10/03 12:0 a.m.9 views

HP-UX Security Patch : PHKL_28428

mmap/fork io,VM-JFS ddlock,thrd prf,usr lim %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26388; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

7AI score
Exploits0References1
OSV
OSV
added 2005/01/10 5:0 a.m.1 views

DEBIAN-CVE-2004-0994

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the readprffile function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify...

10CVSS8.1AI score0.17526EPSS
Exploits0References1
Rows per page
Query Builder