Lucene search
+L

28881 matches found

NVD
NVD
•added 2025/01/15 1:15 a.m.•27 views

CVE-2025-0343

Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constrain...

7.5CVSS0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/15 12:48 a.m.•34 views

CVE-2025-0343

Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constrain...

0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/15 12:48 a.m.•10 views

CVE-2025-0343

Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constrain...

7.6AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/15 12:48 a.m.•109 views

CVE-2025-0343

The Swift ASN.1 library is vulnerable to a denial-of-service (DoS) condition when parsing certain BER/DER constructions . The root cause is a logic error where the library assumes specific objects can only exist in constructed or primitive forms and triggers a preconditionFailure when these const...

7.5CVSS6.5AI score0.00331EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/15 12:48 a.m.•26 views

CVE-2025-0343

Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constrain...

7.5CVSS5.8AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/15 12:00 a.m.•5 views

CVE-2025-0343: Improper Handling of Syntactically Invalid Structure

Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constrain...

7.5CVSS5.8AI score0.00331EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/15 12:00 a.m.•7 views

CVE-2024-8603: Use of a Broken or Risky Cryptographic Algorithm

A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices...

8.2CVSS5.7AI score0.00337EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/01/14 4:32 p.m.•31 views

CVE-2025-0343: Swift ASN.1 can crash when parsing maliciously formed BER/DER

Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constrain...

7.5CVSS6.9AI score0.00331EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/01/14 4:32 p.m.•21 views

GHSA-W8XV-RWGF-4FWH CVE-2025-0343: Swift ASN.1 can crash when parsing maliciously formed BER/DER

Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constrain...

7.5CVSS6.3AI score0.00331EPSS
SaveExploits0References4
OSV
OSV
•added 2025/01/14 2:15 p.m.•16 views

CVE-2024-46667

A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections...

7.5CVSS5.8AI score0.00593EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/14 2:15 p.m.•25 views

CVE-2024-46667

A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections...

7.5CVSS0.00593EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/14 2:09 p.m.•25 views

CVE-2024-46667

A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections...

7.5CVSS0.00593EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/14 2:09 p.m.•11 views

CVE-2024-46667

A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections...

7.5CVSS7AI score0.00593EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/14 2:09 p.m.•74 views

CVE-2024-46667

CVE-2024-46667 affects Fortinet FortiSIEM versions 5.3, 5.4, 6.x, 7.0, and 7.1.0–7.1.5. The root cause is a resource allocation issue with no limits or throttling, which can allow an attacker to exhaust all allotted TLS connections and deny valid TLS traffic. Documents consistently describe the c...

7.5CVSS7.5AI score0.00593EPSS
SaveExploits0References1Affected Software1
Redos
Redos
•added 2025/01/14 12:00 a.m.•15 views

ROS-20250114-02

LibreOffice office suite vulnerability is related to incorrect cryptographic signature verification. signature. Exploitation of the vulnerability could allow an attacker to create a specially crafted document, which, upon recovery, would report the valid status of the electronic signature A...

10CVSS6.8AI score0.00428EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•6 views

CVE-2024-46667: Allocation of Resources Without Limits or Throttling

A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections...

7.5CVSS5.8AI score0.00593EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/14 12:00 a.m.•17 views

Fortinet FortiSIEM 安全漏洞

Fortinet FortiSIEM is a security information and event management system from Fortinet. The system includes features such as asset discovery, workflow automation, and unified management. A security vulnerability exists in Fortinet FortiSIEM that stems from the inclusion of a resource allocation...

7.5CVSS6.4AI score0.00593EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•14 views

PT-2025-2747 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSIEM versions 5.3 through 7.1.5 Description: A resource allocation issue without limits or throttling may allow an attacker to deny valid TLS traffic by consuming all allotted connections. Recommendations: For Fortinet FortiSIEM...

7.5CVSS6.3AI score0.00593EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/01/11 12:00 a.m.•7 views

PT-2025-4830

Name of the Vulnerable Software and Affected Versions Veeam affected versions not specified Description A vulnerability in the Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server due to a failure to properly validate TLS certificates. This...

9CVSS0.00637EPSS
SaveExploits0References58
Broadcom
Broadcom
•added 2025/01/08 12:00 a.m.•40 views

Brocade ASCG Vulnerability Disclosures

Brocade Security Advisories posted on October 6, 2026 CVEs addressed in ASCG 3.4.0, 3.4.0a, 3.4.0b, 3.4.0c and 3.5.0 CVE-2021-4083 A read-after-free memory flaw was found in the Linux kernel's garbage collection PSIRT Risk: Low...

9.8CVSS7.9AI score0.1393EPSS
SaveExploits19
Rows per page
Query Builder