Skip to content
OpenAdvisories

Archive

5 February 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-7595 Public exploit

    GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet

    GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network…

  • Medium 4.3
    CVE-2025-23419 Public exploit

    TLS Session Resumption Vulnerability

    When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://ngin…