Vulnerabilities (CVE)

Filtered by CWE-179
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-3832 2 Gnu, Redhat 4 Gnutls, Enterprise Linux, Hardened Images and 1 more 2026-06-02 N/A 3.7 LOW
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.
CVE-2025-4759 1 Lirantal 1 Lockfile-lint-api 2025-06-03 N/A 8.3 HIGH
Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which can be bypassed by extending the package name allowing an attacker to install other npm packages than the intended one.
CVE-2024-41686 1 Syrotech 2 Sy-gpon-1110-wdont, Sy-gpon-1110-wdont Firmware 2024-11-21 N/A 3.3 LOW
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.