Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

TI-2020-16084 CVE-2020-26263 · GHSA-wvcv-832q-fjg7

RSA vulnerability in tslite-ng

Priority LOW 36

tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01523 Published 2020-12-21 Fixed in 0.7.6, 0.8.0-alpha39 CWE-326
Priority LOW 28

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00772 Published 2018-04-18 Fixed in 0.7.4 CWE-354