Lucene search
K

9 matches found

Debian CVE
Debian CVE
added 2026/04/09 3:50 p.m.2 views

CVE-2026-39853

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verification paths. During verification of a PKCS7 signature, the code copies the digest value from a parsed...

7.8CVSS5.9AI score0.00163EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/04/08 5:13 p.m.2 views

CVE-2026-33753

A flaw was found in rfc3161-client, a Python library implementing the Time-Stamp Protocol TSP. This authorization bypass vulnerability allows a remote attacker to impersonate a trusted TimeStamping Authority TSA. The flaw exists in the library's signature verification process, specifically in how...

7.5CVSS5.9AI score0.00188EPSS
Exploits1References4
OSV
OSV
added 2026/04/08 3:0 p.m.3 views

GHSA-3XXC-PWJ6-JGRJ rfc3161-client Has Improper Certificate Validation

Summary An Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw in how the library extracts the leaf certificate from an unordered PKCS7 bag of certificates, an attacker ca...

6.2CVSS5.8AI score0.00188EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2026/04/08 3:0 p.m.2 views

rfc3161-client Has Improper Certificate Validation

Summary An Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw in how the library extracts the leaf certificate from an unordered PKCS7 bag of certificates, an attacker ca...

7.5CVSS5.8AI score0.00188EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/04/08 2:54 p.m.19 views

CVE-2026-33753 Improper Certificate Validation in rfc3161-client

rfc3161-client is a Python library implementing the Time-Stamp Protocol TSP described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw i...

6.2CVSS0.00188EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/02/14 3:9 p.m.26 views

CVE-2026-23122 igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue

In the Linux kernel, the following vulnerability has been resolved: igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue The previous 7 KB per queue caused TX unit hangs under heavy timestamping load. Reducing to 5 KB avoids these hangs and matches the TSN recommendation in I225/I226 SW Use...

0.001EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/07/17 1:6 a.m.4 views

kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841

In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed commit started to use the ptp workqueue to get the second part of the timestamp. And when the port was set down, then this workqueue is stopped. But if...

5.5CVSS6.8AI score0.00225EPSS
Exploits0References5
Oracle linux
Oracle linux
added 2020/11/12 12:0 a.m.104 views

Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...

7.8CVSS7.4AI score0.034EPSS
Exploits6
Microsoft KB
Microsoft KB
added 2020/04/13 12:0 a.m.58 views

Microsoft Security Advisory: Update for deprecation of MD5 hashing algorithm for Microsoft root certificate program: August 13, 2013

Microsoft Security Advisory: Update for deprecation of MD5 hashing algorithm for Microsoft root certificate program: August 13, 2013 INTRODUCTION Microsoft has released a Microsoft security advisory about this issue for IT professionals. The security advisory contains additional security-related...

6.5AI score
Exploits0
Rows per page
Query Builder