8 February 2023

4 results · Clear filters · Feed

• Medium 5.9
  CVE-2022-4304 Public exploit EPSS 24%

  Timing Oracle in RSA Decryption

  A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a …

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi crates.io
  Feb 8, 2023
• High 7.4
  CVE-2023-0286 Public exploit EPSS 68%

  X.400 address type confusion in X.509 GeneralName

  There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address fiel…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI crates.io
  Feb 8, 2023
• Critical 9.8
  CVE-2023-0744 Public exploit

  Improper Access Control in answerdev/answer

  Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.

  answerdev answerdev/answer github.com/answerdev/answer Go
  Feb 8, 2023
• Medium 6.4
  CVE-2023-0748 Public exploit

  Open Redirect in btcpayserver/btcpayserver

  Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.

  BTCPay Server btcpayserver/btcpayserver
  Feb 8, 2023