Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Priority MEDIUM 55

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.41683 Published 2016-09-26 Partial fix CWE-125
Priority HIGH 71

The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) o…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.44218 Published 2016-09-16 Partial fix CWE-787
Priority HIGH 65

The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.37171 Published 2016-07-04 Partial fix · 1.3.2 CWE-20
Priority HIGH 71

OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspec…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.44505 Published 2016-06-20 Partial fix CWE-190