CWE-392.

net-imap vulnerable to STARTTLS stripping via invalid response timing

• CWE-325
• CWE-392

<0.3.10 || >=0.4.0, <0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4 · fixed in 0.3.10, 0.4.24, 0.5.14, 0.6.4

libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure

• CWE-331
• CWE-392

<0.0.7 · fixed in 0.0.7

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resultin…

• Cisco Secure Firewall Threat Defense (FTD) Software
• Cisco Cyber Vision
• CWE-392

EVerest libocpp: The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest…

• EVerest libocpp
• CWE-392

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerability.

• NVIDIA Jetson Orin, IGX Orin and Xavier Devices
• CWE-392

Dragonfly: DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of…

• Dragonfly
• CWE-392

ConnMan: In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an…

• ConnMan
• CWE-392

Vulnerable OpenSSL included in cryptography wheels

• CWE-392
• CWE-1395

>=42.0.0, <44.0.1 · fixed in 44.0.1

phonenumber: panic on parsing crafted phonenumber inputs

• Broken access control
• Denial of service

>=0.3.3, <0.3.6 · fixed in 0.3.6

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).

• Siemens SINEC INS
• CWE-392

phonenumber: panic on parsing crafted RF3966 phonenumber inputs

• CWE-248
• CWE-392

>=0.0.0-0, <0.2.5 || >=0.3.0, <0.3.3 · fixed in 0.2.5, 0.3.3

blurhash: panic on parsing crafted blurhash inputs

• CWE-248
• CWE-392

>=0.0.0-0, <0.2.0 · fixed in 0.2.0

SRX Series: MACsec failure to report errors

• Juniper Networks Junos OS
• CWE-392