Skip to content
OpenAdvisories

Archive

23 February 2016

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Unscored —

    x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output i…

  • Unscored —

    The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces inc…

  • Unscored —

    The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces inc…

  • Unscored —

    Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page pa…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in log_chat.cgi in Script* Log-Chat before 2.0 allows remote attackers to inje…

  • High 7.5

    Regular Expression Denial of Service in is-my-json-valid

    The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports['utc-millisec'] regular expression, which allows remote attackers to cause a denial of service (blocked event loop) via a crafted string.