Filter
AND
Oracle Application Testing SuiteXSS, Input Validation
7.5
First published (updated )
debian/libssh2A server could send a specially crafted SSH_MSG_CHANNEL_REQUEST packet with an exit status message a…
9.1
First published (updated )
openSUSE LeapA server could send a specially crafted partial SFTP packet with a zero value for the payload length…
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraPotential recycling of random numbers used in cryptography exists within PuTTY before 0.71.
9.8
First published (updated )
Fedoraproject FedoraMultiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY v…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraA remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before ho…
7.5
First published (updated )
Debian Debian LinuxVixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (mem…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nodejs Node.jsSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service
7.8
First published (updated )
redhat/jbcs-httpd24-httpdSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nodejs Node.jsSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service
7.8
First published (updated )
F5 Big-ip Local Traffic ManagerSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service
7.8
First published (updated )
F5 Big-ip Local Traffic ManagerSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service
7.8
First published (updated )
Nodejs Node.jsSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service
7.8
First published (updated )
FreeBSD FreeBSDThe implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/wpaThe implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit
8.1
First published (updated )
FreeBSD FreeBSDThe implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit
8.1
First published (updated )
FreeBSD FreeBSDThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns
4.3
First published (updated )
FreeBSD FreeBSDThe implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks
5.9
First published (updated )
Fedoraproject FedoraAn invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.