14373 matches found
CVE-2025-4575 The x509 application adds trusted use instead of rejected use
Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked as trusted for that use. A copy & paste...
CVE-2025-4575
The OpenSSL x509 command line application is vulnerable to a logic error where using the -addreject option incorrectly adds a trusted use instead of a rejected use for a certificate. This issue was introduced in OpenSSL 3.5 due to a copy & paste error during code refactoring. If a user attempts t...
OpenSSL Security Advisory 20250522
OpenSSL Security Advisory 20250522 - Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation through incorrect assignment of trusted use instead of a rejected use for a certificate when using the -addreject option with the openssl x509 application. If a user intends to make a trusted certificate...
PT-2025-22324 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a remote code execution problem. However, the provided information does not specify the details of the issue, such as the estimated number of potentially affected devices...
UBUNTU-CVE-2025-37942
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
monasca-agent (1.1.20), rejected (>=3.12.0, <=3.19.9) +1 more potentially affected by CVE-2025-47287 via tornado (4.2.1)
tornado PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - monasca-agent 1.1.20 - rejected =3.12.0, =1.0.0, =1.4.0 Source cves: CVE-2025-47287 Source advisory: OSV:GHSA-7CX3-6M66-7C5M...
CVE-2025-47275
Auth0-PHP provides the PHP SDK for Auth0 Authentication and Management APIs. Starting in version 8.0.0-BETA1 and prior to version 8.14.0, session cookies of applications using the Auth0-PHP SDK configured with CookieStore have authentication tags that can be brute forced, which may result in...
PT-2025-21655 · Undefined · Undefined
CVE-2025-22756 - CVE-2022-47947: Apache HTTP Server Command Injection CVE ID : CVE-2025-22756 Published : May 14, 2025, 2:15 p.m. | 3 hours, 14 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link f...
kernel: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
This CVE has been marked as Rejected by the assigning CNA...
kernel: net: napi: Prevent overflow of napi_defer_hard_irqs
This CVE has been marked as Rejected by the assigning CNA...
CVE-2025-37835
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2025-37804
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
SUSE CVE-2022-49856
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
SUSE CVE-2022-49816
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2023-53104
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2023-53122
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2022-49933
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...