Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-44359

Malicious code in bioql PyPI...

9.1CVSS9AI score0.00143EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/07/20 11:8 p.m.8 views

CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

7CVSS6.6AI score0.00308EPSS
Exploits0References1
OSV
OSV
added 2025/07/18 11:15 p.m.2 views

DEBIAN-CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

9.8CVSS5.4AI score0.00308EPSS
Exploits0References1
NVD
NVD
added 2025/07/18 11:15 p.m.6 views

CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

9.8CVSS0.00308EPSS
Exploits0References1
OSV
OSV
added 2025/07/18 11:15 p.m.4 views

CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

9.8CVSS7.3AI score
Exploits0References1
OSV
OSV
added 2025/07/18 11:15 p.m.1 views

UBUNTU-CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

9.8CVSS5.8AI score0.00308EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/07/18 10:34 p.m.5 views

CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

9.8CVSS5.4AI score0.00308EPSS
Exploits0
CVE
CVE
added 2025/07/18 10:34 p.m.31 views

CVE-2025-7394

In CVE-2025-7394, the OpenSSL compatibility layer’s RAND_poll() misbehavior can yield predictable random values from RAND_bytes() when fork() occurs, affecting only applications that call RAND_bytes() after forking (not internal TLS operations). WolfSSL implemented a complementary change so RAND_...

9.8CVSS7.3AI score0.00308EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/07/18 10:34 p.m.7 views

CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

7CVSS0.00308EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/12/13 12:0 a.m.13 views

CBL Mariner 2.0 Security Update: mariadb (CVE-2023-3724)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3724 advisory. - If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connectin...

9.1CVSS8.3AI score0.00143EPSS
Exploits0References2
OSV
OSV
added 2023/07/17 10:15 p.m.1 views

DEBIAN-CVE-2023-3724

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

8.8CVSS8.3AI score0.00143EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2023/07/17 9:13 p.m.26 views

CVE-2023-3724

If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...

9.1CVSS8.7AI score0.00143EPSS
Exploits0
Rows per page
Query Builder