Vulnerabilities
Summary — last 7 days
New vulnerabilities2,792▲ 39 vs. last week
Critical / high1,284▼ 238 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)246▲ 228 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 1.5% | — | Tlslite-ng Project Tlslite-ng | 12/21/2020 | 6/17/2026 | tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before versions 0.7.6 and 0.8.0-alpha39, the code that performs decryption and padding check in RSA PKCS#1 v1.5 decryption is data dependant. In particular, the code has multiple ways in which it leaks… | |
| Modified | Medium (5.9) | 0.77% | — | Tlslite-ng Project Tlslite-ng | 4/18/2018 | 6/17/2026 | tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ct_check_cbc_mac_and_pad(); line "end_pos = data_len - 1 - mac.digest_size" that can result in… | |
| Modified | High (7.5) | 3.2% | — | Tlslite Project Tlslite | 6/13/2017 | 6/17/2026 | The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash). |