SM2 Decryption Buffer Overflow

There's a flaw in libxml2 in versions before 2.9.11

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the…

An issue was discovered in libxml2 before 2.10.3

There's a flaw in libxml2's xmllint in versions before 2.9.11

An issue was discovered in libxml2 before 2.10.3

Resource leakage when decoding certificates and keys

Infinite loop in BN_mod_sqrt() reachable when parsing certificates

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection…

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length

The c_rehash script allows command injection

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows

A flaw was found in libxml2

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c

Incorrect MAC key used in the RC4-MD5 ciphersuite

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference

The X.509 GeneralName type is a generic type for representing different types of names

0-byte record padding oracle

AES OCB fails to encrypt some bytes

OCSP_basic_verify may incorrectly verify the response signing certificate