Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 42

Export CSV
CVE-2020-25648

nss: TLS 1.3 CCS flood remote DoS Attack

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Fedoraproject Mozilla Oracle and 1 more
Products
Fedora Network Security Services Communications Offline Mediation Controller and 4 more
CVE-2019-17195

nimbus-jose-jwt: Uncaught exceptions while parsing a JWT

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

CVSS 3.1 · 9.8 Critical EPSS 11.1% KEV · Not listed
Vendors
Apache Connect2id Oracle and 1 more
Products
Hadoop Nimbus Jose\+jwt Communications Cloud Native Core Security Edge Protection Proxy and 14 more