4280 matches found
K15571: OpenSSL vulnerability CVE-2014-3508
Security Advisory Description Description The OBJobj2txt function in crypto/objects/objdat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of '\0' characters, which allows context-dependent attackers to...
CVE-2023-0453
creationtimestamp| type| source ---|---|--- 2023-02-21 12:21:45+00:00| seen| https://t.me/cibsecurity/58584...
CVE-2022-48320
creationtimestamp| type| source ---|---|--- 2023-02-20 20:16:04+00:00| seen| https://t.me/cibsecurity/58538...
CVE-2023-0482
creationtimestamp| type| source ---|---|--- 2023-02-18 00:13:46+00:00| seen| https://t.me/cibsecurity/58490 2025-02-14 09:46:58+00:00| seen| Telegram/lhUNSPv5f1QrgHK1n0zvZzeWVxZis6ceZ9RM1J7TcwCqrral...
CVE-2022-26509
creationtimestamp| type| source ---|---|--- 2023-02-16 22:17:54+00:00| seen| https://t.me/cibsecurity/58363 2023-02-18 14:37:16+00:00| seen| https://t.me/itsecnews/2208...
CVE-2021-42756
creationtimestamp| type| source ---|---|--- 2023-02-16 22:17:51+00:00| seen| https://t.me/cibsecurity/58360 2023-02-20 09:47:48+00:00| seen| https://t.me/truesecator/4087 2023-02-23 05:57:38+00:00| published-proof-of-concept| https://t.me/cKure/10703 2025-08-31 03:12:56+00:00| seen|...
CVE-2023-25173
creationtimestamp| type| source ---|---|--- 2023-02-16 18:12:41+00:00| seen| https://t.me/cibsecurity/58333...
SUSE CVE-2004-0076
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was removed from consideration by its Candidate Numbering Authority. Notes: none...
SUSE CVE-2010-4044
Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote attackers to spoof URLs by changing a window's size...
SUSE CVE-2011-3904
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text aka bidi handling...
SUSE CVE-2013-0401
The Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competiti...
SUSE CVE-2015-2730
Mozilla Network Security Services NSS before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography ECC multiplications, which makes it easier for remote attackers to spoof ECDS...
SUSE CVE-2016-1104
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064...
SUSE CVE-2016-7929
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader...
SUSE CVE-2018-2786
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...
SUSE CVE-2018-5812
An error within the "nikoncoolscanloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference...
SUSE CVE-2018-10392
mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...
SUSE CVE-2018-11623
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...