-
https://crocs.fi.muni.cz/public/papers/rsa_ccs17
"A newly discovered vulnerability in generation of RSA keys used by a software library adopted in cryptographic smartcards, security tokens and othe…
-
## CVE-2023-0215 - High Severity Vulnerability
Vulnerable Library - OpenSSLOpenSSL_1_1_1g
TLS/SSL and crypto library
Library home page: https://github.com/OpenSSL/OpenSSL.git
Found in base branch:…
-
Hello,
within a student project we needed to find 0-day vulnerabilities in java applications.
We've tested yours and found several security issues, and we would like to let you know about them.
…
-
Now it doesn't support libnss3.so. Could you please add libnss3.so in the stack image?
## Describe the Enhancement
## Possible Solution
## Motivation
-
[Elastic Common Schema](https://www.elastic.co/guide/en/ecs/current) defines a set of attributes for vulnerabilities, certificates, process, users, etc that has an intersection with OCSF. It was also …
-
## CVE-2022-36087 - Medium Severity Vulnerability
Vulnerable Library - oauthlib-3.1.1-py2.py3-none-any.whl
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
Libra…
-
Planner [2349](https://openshift.io/openshiftio/openshiftio/plan/detail/2349)
## Details
As an openshift.io engineer design a system that optionally generates security vulnerability notifications fo…
-
Vulnerable Library - express-4.17.1.tgz
Fast, unopinionated, minimalist web framework
Library home page: https://registry.npmjs.org/express/-/express-4.17.1.tgz
Path to dependency file: /package.jso…
-
### Description
This is not a FR, but it's also not a bug report...
Really cool to see the work on this. I've been thinking on risks of exploiting the supply chain when discovery is used.
Note: …
-
We've had our soon to be launched site externally security tested. The security auditors use the AS/NZS 31000:2009 standard for assessing risk. A few issues recorded were linked directly to the LogVie…