Lucene search
+L

2399 matches found

SUSE CVE
SUSE CVE
•added 2024/06/11 2:06 a.m.•12 views

SUSE CVE-2024-36405

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for -Os, -O1, and other...

5.5CVSS6.8AI score0.00515EPSS
SaveExploits0References4
NVD
NVD
•added 2024/06/10 1:15 p.m.•56 views

CVE-2024-36405

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for -Os, -O1, and other...

7.5CVSS0.00515EPSS
SaveExploits0References4
CVE
CVE
•added 2024/06/10 12:47 p.m.•113 views

CVE-2024-36405

CVE-2024-36405 affects the liboqs reference Kyber KEM implementation. A control-flow timing leak arises when the Kyber KEM is compiled with Clang 15–18 under certain options (including -Os and -O1), enabling a local attacker to measure decapsulation timings and recover the entire ML-KEM 512 secre...

7.5CVSS5.7AI score0.00515EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2024/06/10 12:47 p.m.•79 views

CVE-2024-36405

Removed by vendor...

7.5CVSS6.7AI score0.00515EPSS
SaveExploits0
OSV
OSV
•added 2024/06/10 12:47 p.m.•38 views

CVE-2024-36405 Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for -Os, -O1, and other...

5.9CVSS6.5AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2024/06/10 12:47 p.m.•77 views

CVE-2024-36405 Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for -Os, -O1, and other...

5.9CVSS0.00515EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/06/10 12:00 a.m.•17 views

liboqs security breach

liboqs is an open source C library for quantum secure cryptographic algorithms open sourced by Open Quantum Safe. A security vulnerability exists in liboqs that stems from insufficient control flow timing...

7.5CVSS6.9AI score0.00515EPSS
SaveExploits0References7
GithubExploit
GithubExploit
•added 2024/06/06 4:03 p.m.•451 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919-POC A Simple tool to Automate CVE-2024-24919 E...

8.6CVSS8.1AI score0.99978EPSS
SaveExploits53
GithubExploit
GithubExploit
•added 2024/06/03 6:17 p.m.•118 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 Nmap script to check vulnerability CVE-2024-249...

8.6CVSS8.1AI score0.99978EPSS
SaveExploits53
Wallarm Lab
Wallarm Lab
•added 2024/06/03 11:10 a.m.•98 views

CVE-2024-24919: Check Point’s Quantum Gateway comes under Attack as Hackers exploit Zero-Day Vulnerability

Active Exploits target Check Point Security Gateway Zero-Day Information Disclosure flaw Check Point Cybersecurity has issued hotfixes to address a zero-day vulnerability in its VPNs that has been exploited to gain remote access to firewalls and potentially infiltrate corporate networks. On...

8.8CVSS7.1AI score0.99978EPSS
SaveExploits53
GithubExploit
GithubExploit
•added 2024/06/02 1:58 p.m.•69 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 PoC a Proof of Concept of CVE-2024-24919 Read...

8.6CVSS8.1AI score0.99978EPSS
SaveExploits53
GithubExploit
GithubExploit
•added 2024/06/02 6:17 a.m.•168 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 Potentially allowing an attacker to read certai...

8.6CVSS7.8AI score0.99978EPSS
SaveExploits53
GithubExploit
GithubExploit
•added 2024/05/31 10:07 p.m.•411 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

Exploit for CVE-2024-24919 Description This Python script...

8.6CVSS8AI score0.99978EPSS
SaveExploits53
GithubExploit
GithubExploit
•added 2024/05/31 12:10 p.m.•831 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919...

8.6CVSS8AI score0.99978EPSS
SaveExploits53
GithubExploit
GithubExploit
•added 2024/05/31 10:18 a.m.•284 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 An Vulnerability detection and Exploitation too...

8.6CVSS8.1AI score0.99978EPSS
SaveExploits53
Tenable Nessus
Tenable Nessus
•added 2024/05/31 12:00 a.m.•33 views

Check Point Quantum Gateway Directory Traversal

Check Point Quantum Gateway has a vulnerability that allows an unauthenticated attacker to access sensitive information by sending a specifically forged request. No source data...

8.6CVSS7.8AI score0.99978EPSS
SaveExploits53References3
NCSC
NCSC
•added 2024/05/30 7:56 a.m.•17 views

Vulnerability fixed in Check Point VPN products

Check Point has fixed a vulnerability in Quantum Gateway VPN systems. Check Point reports observing active abuse attempts. A path-traversal bug allows a malicious party to gain access to the username and password credentials of local accounts on the VPN system. If these local accounts, are...

8.6CVSS7.7AI score0.99978EPSS
SaveExploits53References2
Tenable Nessus
Tenable Nessus
•added 2024/05/30 12:00 a.m.•48 views

Check Point Quantum Gateway Directory Traversal (Direct Check)

Binary data checkpointgaiaCVE-2024-24919.nbin...

8.6CVSS7.9AI score0.99978EPSS
SaveExploits53References4
CISA KEV Catalog
CISA KEV Catalog
•added 2024/05/30 12:00 a.m.•56 views

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several...

8.6CVSS7.9AI score0.99978EPSS
SaveIn wildExploits53
The Hacker News
The Hacker News
•added 2024/05/29 3:16 p.m.•123 views

Check Point Warns of Zero-Day Attacks on its VPN Gateway Products

Check Point is warning of a zero-day vulnerability in its Network Security gateway products that threat actors have exploited in the wild. Tracked as CVE-2024-24919 CVSS score: 8.6, the issue impacts CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, and...

8.6CVSS7.8AI score0.99978EPSS
SaveExploits53
Rows per page
Query Builder