Search Vulnerabilities

Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name

Silent Drop of TLS 1.3 Encrypted Records in s2n-tls

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle...

1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID

HMAC-BLAKE2 final discards message when key length exceeds block size

pnpm: Integrity Check Bypass via Missing Lockfile Integrity Field

Mastodon: Spoofing of attribution domains

Mastodon: Removal of integrity-protected JSON entries from signed activities

Apache APISIX: Authentication bypass in jwe-decrypt

Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities

CMS AuthEnvelopedData Processing May Accept Forged Messages

PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK

Lockfile checksums not verified in Hex allows dependency integrity bypass

SP1 V6 Recursion Circuit Row-Count Binding Gap

xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode

wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag

PKCS7 CBC Padding Oracle — Plaintext Recovery

Lack of Dynamic Library Validation in SzafirHost

nginx-ui Backup Restore Allows Tampering with Encrypted Backups