SP
Product
Smi-s Provider
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 7Low 0
Watch
Add Smi-s Provider to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-29824 | 6.5 | May 3 | In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows Affected: All versions, or not specified |
| CVE-2021-3541 | 6.5 | Jul 9 | A flaw was found in libxml2 Affected: All versions, or not specified |
| CVE-2022-1434 | 5.9 | May 3 | Incorrect MAC key used in the RC4-MD5 ciphersuite Affected: All versions, or not specified |
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: All versions, or not specified |
| CVE-2018-0735 | 5.9 | Oct 29 | Timing attack against ECDSA signature generation Affected: All versions, or not specified |
| CVE-2022-2097 | 5.3 | Jul 5 | AES OCB fails to encrypt some bytes Affected: 0 |
| CVE-2022-1343 | 5.3 | May 3 | OCSP_basic_verify may incorrectly verify the response signing certificate Affected: All versions, or not specified |
Showing 7
