Lucene search
+L

7 matches found

Cvelist
Cvelist
•added 2025/07/08 12:48 p.m.•27 views

CVE-2025-21433 NULL Pointer Dereference in SPS-HLOS

Transient DOS when importing a PKCS8-encoded RSA private key with a zero-sized modulus...

6.2CVSS0.00079EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2023/07/11 12:00 a.m.•14 views

July 11, 2023-KB5028854 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016

None None...

5.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2016/12/15 10:11 p.m.•11 views

openssl: use-after-free on invalid EC private key import

A use-after-free flaw was found in the way OpenSSL imported malformed Elliptic Curve private keys. A specially crafted key file could cause an application using OpenSSL to crash when imported...

6.8CVSS6.6AI score0.1633EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2016/03/31 12:00 a.m.•13 views

The vulnerability of the Network Security Services library allows a perpetrator to cause a service failure or exert other effects.

The vulnerability of the PK11ImportDERPrivateKeyInfoAndReturnKey function in the Network Security Services library is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service failures or other effects by using specially crafted k...

6.8CVSS7.6AI score0.02171EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2015/03/19 10:59 p.m.•6 views

DEBIAN-CVE-2015-0209

Use-after-free vulnerability in the d2iECPrivateKey function in crypto/ec/ecasn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have...

6.8CVSS7.3AI score0.1633EPSS
SaveExploits0References1
OSV
OSV
•added 2015/03/17 12:00 a.m.•11 views

UBUNTU-CVE-2015-0209

Use-after-free vulnerability in the d2iECPrivateKey function in crypto/ec/ecasn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have...

6.8CVSS7AI score0.1633EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/05/07 12:00 a.m.•3 views

CVE-2001-0072: Undefined Security Weakness

gpg aka GnuPG 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust...

5CVSS5.8AI score0.01969EPSS
SaveExploits0References1
Rows per page
Query Builder