Service Location Protocol (SLP) Denial-of-Service Vulnerability

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the…

An issue was discovered in libxml2 before 2.10.3

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following

Resource leakage when decoding certificates and keys

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes

Segmentation fault in SSL_check_chain

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection…

The c_rehash script allows command injection

The c_rehash script allows command injection

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows

A flaw was found in libxml2

Incorrect MAC key used in the RC4-MD5 ciphersuite

0-byte record padding oracle

Timing attack against ECDSA signature generation

AES OCB fails to encrypt some bytes

OCSP_basic_verify may incorrectly verify the response signing certificate