Archive
23 February 2016
Vulnerabilities first published on this day (UTC), newest first.
6 results · Feed
-
Unscored —
x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output i…
-
Unscored —
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces inc…
-
Unscored —
The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces inc…
-
Unscored —
Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page pa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in log_chat.cgi in Script* Log-Chat before 2.0 allows remote attackers to inje…
-
High 7.5
Regular Expression Denial of Service in is-my-json-valid
The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports['utc-millisec'] regular expression, which allows remote attackers to cause a denial of service (blocked event loop) via a crafted string.