143 matches found
curl: SMTP connection reuse ignores --ssl-reqd / CURLOPT_USE_SSL and reuses a clear-text STARTTLS session on current master
Summary: Current master reintroduces a STARTTLS connection-reuse bug in SMTP. After commit 91dcf4e610 url: urlmatchdestination fix, curl/libcurl can reuse an already-established clear-text smtp:// session for a later logical request that explicitly requires TLS via --ssl-reqd or CURLOPTUSESSL =...
SUSE CVE-2016-9244
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer SSL session IDs from other sessions. It is possible...
Security Bulletin: Security vulnerability in nginx affects IBM Robotic Process Automation for Cloud Pak
Summary A security vulnerability in nginx affects IBM Robotic Process Automation for Cloud Pak. Nginx is used by IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details...
Linux Distros Unpatched Vulnerability : CVE-2026-2646
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate a...
DEBIAN-CVE-2026-2646
A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and...
CVE-2026-2646 Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function
A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and...
PT-2026-26322
A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSL d2i SSL SESSION function. When deserializing session data with SESSION CERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers...
EUVD-2014-3580
Malware in sbrugna...
EUVD-2015-0577
Malware in sbrugna...
EUVD-2015-3243
Malware in sbrugna...
EUVD-2008-2230
Malware in sbrugna...
EUVD-2004-0777
Malware in sbrugna...
EUVD-2019-16149
Malware in sbrugna...
EUVD-2016-7360
Malware in sbrugna...
EUVD-2008-3784
Malware in sbrugna...
EUVD-2006-5973
Malware in sbrugna...
EUVD-2020-0124
Malware in sbrugna...
EUVD-2017-6985
Malware in sbrugna...
EUVD-2013-2093
Malware in sbrugna...
EUVD-1999-0428
Malware in sbrugna...