İçeriğe atla
Noroxi

stunnel kayıtları

stunnel üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%75
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

12 kayıt
  • CVE-2001-0060
    41Planlayın

    Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.

    KritikCVSS 10,0İstismar yokEPSS %2

    stunnel · stunnel12 Şub 2001

  • CVE-2011-2940
    39İzleyin

    stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspe

    KritikCVSS 9,3İstismar yokEPSS %5

    stunnel · stunnel25 Ağu 2011

  • CVE-2002-0002
    32İzleyin

    Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious serve

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    stunnel · stunnel31 Oca 2002

  • CVE-2021-20230
    30İzleyin

    A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and ve

    YüksekCVSS 7,5İstismar yokEPSS %1

    stunnel · stunnel23 Şub 2021

  • CVE-2008-2400
    28İzleyin

    Unspecified vulnerability in stunnel before 4.23, when running as a service on Windows, allows local users to gain privileges via unknown at

    YüksekCVSS 7,2İstismar yokEPSS %0

    stunnel · stunnel22 May 2008

  • CVE-2013-1762
    27İzleyin

    stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer convers

    OrtaCVSS 6,6İstismar yokEPSS %2

    stunnel · stunnel8 Mar 2013

  • CVE-2008-2420
    27İzleyin

    The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to

    OrtaCVSS 6,8İstismar yokEPSS %1

    stunnel · stunnel23 May 2008

  • CVE-2015-3644
    24İzleyin

    Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial con

    OrtaCVSS 5,8İstismar yokEPSS %2

    stunnel · stunnel13 May 2015

  • CVE-2003-0147
    22İzleyin

    OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining fact

    OrtaCVSS 5,0İstismar yokEPSS %7

    openssl · openssl31 Mar 2003

  • CVE-2014-0016
    18İzleyin

    stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), whi

    OrtaCVSS 4,3İstismar yokEPSS %2

    stunnel · stunnel24 Mar 2014

  • CVE-2003-0740
    18İzleyin

    Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel

    OrtaCVSS 4,6Kavram kanıtıEPSS %0

    stunnel · stunnel20 Eki 2003

  • CVE-2002-1563
    4İzleyin

    stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inc

    DüşükCVSS 1,2İstismar yokEPSS %0

    stunnel · stunnel12 May 2003