Lucene search
+L

355 matches found

Circl
Circl
•added 2023/04/10 12:27 p.m.•19 views

CVE-2023-30459

creationtimestamp| type| source ---|---|--- 2023-04-10 12:27:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4146 2023-04-14 18:26:05+00:00| seen| https://t.me/cibsecurity/62157 2026-07-29 12:00:39+00:00| seen| https://t.me/CVEhub/10377 2026-07-30 00:01:08+00:00| seen|...

7.2CVSS7.1AI score0.02106EPSS
SaveExploits2References3
F5 Networks
F5 Networks
•added 2023/02/21 6:33 p.m.•43 views

K26899353: libcurl vulnerability CVE-2016-8621

Security Advisory Description The curlgetdate function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short. CVE-2016-8621 Impact Custom monitors or shell scripts using curl to download content with a malformed time stamp may be...

7.5CVSS7.5AI score0.04864EPSS
SaveExploits0Affected Software24
SUSE CVE
SUSE CVE
•added 2023/02/15 5:06 a.m.•9 views

SUSE CVE-2016-2180

The TSOBJprintbio function in crypto/ts/tslib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol TSP implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted time-stamp file that is mishandled by...

7.5CVSS6.7AI score0.29982EPSS
SaveExploits1References16
SUSE CVE
SUSE CVE
•added 2023/02/15 3:37 a.m.•8 views

SUSE CVE-2021-42260

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXMLUTFLEAD0 case. It can be triggered by a crafted XML message and leads to a denial of service...

7.5CVSS6.8AI score0.03348EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2023/02/08 10:21 p.m.•78 views

openssl-src contains `NULL` dereference during PKCS7 data verification

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

7.5CVSS7.4AI score0.01846EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2023/02/08 10:21 p.m.•73 views

GHSA-VRH7-X64V-7VXQ openssl-src contains `NULL` dereference during PKCS7 data verification

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

7.5CVSS7.7AI score0.01846EPSS
SaveExploits0References7
OSV
OSV
•added 2023/02/08 8:15 p.m.•11 views

ALPINE-CVE-2023-0401

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

7.5CVSS6.7AI score0.01846EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/08 7:00 p.m.•30 views

CVE-2023-0401 NULL dereference during PKCS7 data verification

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

7.5CVSS7.2AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2023/02/08 7:00 p.m.•63 views

CVE-2023-0401 NULL dereference during PKCS7 data verification

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

7.7AI score0.01846EPSS
SaveExploits0References3
CVE
CVE
•added 2023/02/08 7:00 p.m.•747 views

CVE-2023-0401

CVE-2023-0401 describes a NULL pointer dereference during PKCS7 data verification in OpenSSL. The digest initialization can fail when the signature hash algorithm is known but the implementation is unavailable, due to a missing check on the initialization return value. This can lead to invalid di...

7.5CVSS7.7AI score0.01846EPSS
SaveExploits0References4Affected Software1
AlpineLinux
AlpineLinux
•added 2023/02/08 7:00 p.m.•84 views

CVE-2023-0401

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

7.5CVSS7.9AI score0.01846EPSS
SaveExploits0
OSV
OSV
•added 2023/02/07 12:00 p.m.•34 views

RUSTSEC-2023-0013 `NULL` dereference during PKCS7 data verification

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...

7.5CVSS7.7AI score0.01846EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/11/22 12:00 a.m.•26 views

The vulnerability of the TiXmlParsingData::Stamp function in the tinyxmlparser.cpp component, a XML parser for TinyXML, allows a attacker to cause a service failure.

The vulnerability of the TiXmlParsingData::Stamp function in the tinyxmlparser.cpp component of the TinyXML parser is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially...

7.8CVSS7.3AI score0.03348EPSS
SaveExploits1References12Affected Software6
Circl
Circl
•added 2022/11/13 5:49 a.m.•20 views

CVE-2022-44727

creationtimestamp| type| source ---|---|--- 2022-11-13 05:49:19+00:00| seen| https://t.me/cibsecurity/52912 2025-05-01 14:15:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14286...

9.1CVSS8.6AI score0.02579EPSS
SaveExploits1References2
Circl
Circl
•added 2022/11/10 2:49 a.m.•16 views

CVE-2022-3706

creationtimestamp| type| source ---|---|--- 2022-11-10 02:49:58+00:00| seen| https://t.me/cibsecurity/52804...

4.3CVSS4.6AI score0.00547EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2022/11/08 9:32 a.m.•20 views

kernel: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC

A vulnerability was found in the Linux kernel's KVM component related to the LAPIC during the guest reboot process. This issue arises when the SETLAPIC command is issued without exposing the tsc-deadline mode, leading to warnings and potential inconsistencies due to an unhandled preemption timer...

5.5CVSS6.6AI score0.0021EPSS
SaveExploits0References5
Code423n4
Code423n4
•added 2022/09/27 12:00 a.m.•15 views

the validator would able to manipulate the Time Stamp ant

Lines of code Vulnerability details Impact attacker able to make manipulation in the function of pageprice Proof of Concept validators can make some manipulation in the timestamp. bob validator even if can make time stamp manipulation or 2 secend able to call function faster than others then mint...

6.9AI score
SaveExploits0
Mend
Mend
•added 2022/08/23 3:53 p.m.•4 views

CVE-2020-35509

A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity...

5.4CVSS0.00344EPSS
SaveExploits0References8
CVE
CVE
•added 2022/08/23 3:53 p.m.•167 views

CVE-2020-35509

CVE-2020-35509 affects Keycloak (notably versions 11.0.3 and 12.0.0). A flaw in the direct-grant authenticator allows acceptance of expired certificates due to missing timestamp validation, impacting confidentiality and integrity. The issue is cited across multiple sources (e.g., GHSA) with remed...

5.4CVSS5.1AI score0.00344EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2022/08/08 7:09 a.m.•29 views

Privilege Escalation

github.com/ethereum/go-ethereum is vulnerable to privilege escalation. The vulnerability exists because the time stamp when mining blocks is not properly validated which allows an attacker to change the time-difference values and replace main-chain blocks...

5.9CVSS6.5AI score0.01234EPSS
SaveExploits1References6Affected Software2
Rows per page
Query Builder