Lucene search
+L

1226 matches found

Tenable Nessus
Tenable Nessus
added 2022/11/01 12:0 a.m.46 views

Slackware Linux 15.0 / current php80 Multiple Vulnerabilities (SSA:2022-304-02)

The version of php80 installed on the remote host is prior to 8.0.25 / 8.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-304-02 advisory. - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflo...

9.8CVSS8.2AI score0.05193EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2022/10/29 12:0 a.m.581 views

PHP 8.1.x < 8.1.12 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.1.12 advisory. - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allow...

9.8CVSS8.2AI score0.05193EPSS
SaveExploits4References5
Tenable Nessus
Tenable Nessus
added 2022/10/28 12:0 a.m.256 views

PHP 8.0.x < 8.0.25 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.0.25. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.0.25 advisory. - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allow...

9.8CVSS8.2AI score0.05193EPSS
SaveExploits4References5
Wordfence Blog
Wordfence Blog
added 2022/10/25 4:6 p.m.12 views

Wordfence Intelligence Launches New Malware Hash Feed!

Today, the Wordfence team is launching a Malware Hash Feed as part of our Wordfence Intelligence API. This gives our Enterprise users another way to rapidly and definitively identify malware targeting web applications. As the world’s foremost WordPress security provider, Wordfence has an expertly...

7.1AI score
SaveExploits0
NVD
NVD
added 2022/10/21 6:15 a.m.41 views

CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

9.8CVSS0.05193EPSS
SaveExploits1References14
OSV
OSV
added 2022/10/21 6:15 a.m.8 views

AZL-11503 CVE-2022-37454 affecting package python3 for versions less than 3.9.14-5

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

9.8CVSS7.4AI score0.05193EPSS
SaveExploits1References1
OSV
OSV
added 2022/10/21 6:15 a.m.1 views

DEBIAN-CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

9.8CVSS8AI score0.05193EPSS
SaveExploits1References1
OSV
OSV
added 2022/10/21 6:15 a.m.4 views

UBUNTU-CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

9.8CVSS7.4AI score0.05193EPSS
SaveExploits1References21
UbuntuCve
UbuntuCve
added 2022/10/21 6:15 a.m.76 views

CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

9.8CVSS7.2AI score0.05193EPSS
SaveExploits1References20
Prion
Prion
added 2022/10/21 6:15 a.m.236 views

Integer overflow

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

7.5CVSS10AI score0.05193EPSS
SaveExploits1References13Affected Software6
CNNVD
CNNVD
added 2022/10/21 12:0 a.m.3 views

XKCP 输入验证错误漏洞

XKCP is an extended Keccak code package for XKCP open source. XKCP SHA-3 has a security vulnerability that stems from the fact that an attacker can achieve integer overflow through its sponge function interface leading to the execution of arbitrary code or eliminate the expected cryptographic...

9.8CVSS7.8AI score0.05193EPSS
SaveExploits1References34
Vulnrichment
Vulnrichment
added 2022/10/21 12:0 a.m.14 views

CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

10AI score0.05193EPSS
SaveExploits1References13
CVE
CVE
added 2022/10/21 12:0 a.m.2359 views

CVE-2022-37454

CVE-2022-37454 affects the Keccak XKCP SHA-3 reference implementation prior to fdc6fef, where an integer overflow leads to a buffer overflow in the sponge function interface. This can enable attackers to execute arbitrary code or compromise cryptographic properties. Public advisories note this vu...

9.8CVSS10AI score0.05193EPSS
SaveExploits1References14Affected Software1
OSV
OSV
added 2022/10/21 12:0 a.m.49 views

CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

9.8CVSS6.2AI score0.05193EPSS
SaveExploits1References16
Cvelist
Cvelist
added 2022/10/21 12:0 a.m.96 views

CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

10AI score0.05193EPSS
SaveExploits1References13
AlpineLinux
AlpineLinux
added 2022/10/21 12:0 a.m.66 views

CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

9.8CVSS10AI score0.05193EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/10/21 12:0 a.m.70 views

CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

9.8CVSS8.9AI score0.05193EPSS
SaveExploits1
OSV
OSV
added 2022/10/21 12:0 a.m.67 views

PSF-2022-11 Buffer overflow in the _sha3 module in Python 3.10 and older

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

9.8CVSS9.4AI score0.05193EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/10/20 12:0 a.m.13 views

PT-2022-5188

Name of the Vulnerable Software and Affected Versions Keccak XKCP SHA-3 reference implementation versions before fdc6fef Description The issue is related to an integer overflow and resultant buffer overflow in the sponge function interface of the Keccak XKCP SHA-3 reference implementation. This...

10CVSS8.4AI score0.05193EPSS
SaveExploits1References250
0day.today
0day.today
added 2022/09/26 12:0 a.m.435 views

Veritas Backup Exec Agent Remote Code Execution Exploit

Veritas Backup Exec Agent supports multiple authentication schemes and SHA authentication is one of them. This authentication scheme is no longer used within Backup Exec versions, but had not yet been disabled. An attacker could remotely exploit the SHA authentication scheme to gain unauthorized...

9.8CVSS8.9AI score0.6491EPSS
SaveExploits7
Rows per page
Query Builder