yassl kayıtları
yassl üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %12,5
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-310 Cryptographic Issues2
- CWE-20 Improper Input Validation1
- CWE-399 Resource Management Errors1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
57Planlayın | CVE-2008-0226Silahlaştırılmış | Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitryassl · yassl · CWE-119 | Yüksek7,5 | — | %91,6 | 10 Oca 2008 |
40Planlayın | CVE-2005-3731İstismar yok | Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."yassl · yassl | Kritik10,0 | — | %1,2 | 21 Kas 2005 |
34İzleyin | CVE-2011-2900Kavram kanıtı | Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded yassl · yasslews · CWE-119 | Yüksek7,5 | — | %13,2 | 5 Ağu 2011 |
31İzleyin | CVE-2008-0227İstismar yok | yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a Heyassl · yassl · CWE-119 | Yüksek7,5 | — | %2,4 | 10 Oca 2008 |
23İzleyin | CVE-2014-2900İstismar yok | wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle ayassl · cyassl · CWE-310 | Orta5,8 | — | %0,9 | 22 Nis 2014 |
21İzleyin | CVE-2014-2899İstismar yok | wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer cyassl · cyassl · CWE-20 | Orta5,0 | — | %1,8 | 22 Nis 2014 |
20İzleyin | CVE-2012-1558İstismar yok | yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafteyassl · cyassl · CWE-399 | Orta5,0 | — | %1,3 | 12 Mar 2012 |
18İzleyin | CVE-2013-1623İstismar yok | The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC cyassl · cyassl · CWE-310 | Orta4,3 | — | %2,4 | 8 Şub 2013 |
- CVE-2008-022657Planlayın
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitr
YüksekCVSS 7,5SilahlaştırılmışEPSS %91yassl · yassl10 Oca 2008
- CVE-2005-373140Planlayın
Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."
KritikCVSS 10,0İstismar yokEPSS %1yassl · yassl21 Kas 2005
- CVE-2011-290034İzleyin
Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded
YüksekCVSS 7,5Kavram kanıtıEPSS %13yassl · yasslews5 Ağu 2011
- CVE-2008-022731İzleyin
yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a He
YüksekCVSS 7,5İstismar yokEPSS %2yassl · yassl10 Oca 2008
- CVE-2014-290023İzleyin
wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle a
OrtaCVSS 5,8İstismar yokEPSS %0yassl · cyassl22 Nis 2014
- CVE-2014-289921İzleyin
wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer c
OrtaCVSS 5,0İstismar yokEPSS %1yassl · cyassl22 Nis 2014
- CVE-2012-155820İzleyin
yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafte
OrtaCVSS 5,0İstismar yokEPSS %1yassl · cyassl12 Mar 2012
- CVE-2013-162318İzleyin
The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC c
OrtaCVSS 4,3İstismar yokEPSS %2yassl · cyassl8 Şub 2013