Summary Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessari...
Summary In ExtremeControl before 25.5.12, a cross-site scripting (XSS) vulnerability was discovered in a login interface of the affected application. The issue stems from improper handling of user-sup...
Summary In Kerberos 5 (aka krb5) a memory leak vulnerability was discovered. The issue occurs in the k5sealv3.c file within the GSSAPI library. Specifically, the leak happens during a bounds check in ...
SamPirok
on:
Security Advisory: SA-2022-004 – Spring Framework
