142 matches found
CVE-2020-1968
CVE-2020-1968 describes the Raccoon attack on TLS DH ciphersuites, where re-use of a DH secret allows an attacker to compute the pre‑master secret and eavesdrop on the TLS connection. Affected: OpenSSL 1.0.2 (downstreamly out of public updates) with affected range 1.0.2-1.0.2v. OpenSSL 1.1.1 is n...
Raccoon attack
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman DH based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted...
OpenSSL: Raccoon Attack (CVE-2020-1968) - Windows
OpenSSL is prone to Racoon attacks. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...
OpenSSL: Raccoon Attack (CVE-2020-1968) - Linux
OpenSSL is prone to Racoon attacks. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...
Huawei EulerOS: Security Advisory for gvfs (EulerOS-SA-2019-1968)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-1968-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco NX-OS Software NX-API Denial of Service Vulnerability (CVE-2019-1968)
According to its self-reported version, Cisco NX-OS Software is affected by a denial of service vulnerability in the NX-API of Cisco NX-OS Software due to incorrect validation of HTTP requests. An unauthenticated, remote attacker could exploit this, by sending a crafted HTTP request to the NX-API...
CVE-2019-1968
CVE-2019-1968 affects Cisco NX-OS Software NX-API. The vulnerability stems from incorrect validation of the HTTP header in requests to the NX-API, allowing an unauthenticated remote attacker to trigger a DoS by restarting the NX-API system process. The NX-OS device itself can still forward traffi...
RHEL 7 : qemu-kvm-rhev (RHSA-2019:1968)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1968 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...
Important: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update
An update for qemu-kvm-rhev is now available for Red Hat Virtualization for Red Hat Virtualization Host 7. Red Hat Product Security has rated this update as having a Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities (CVE-2018-1902, CVE-2018-1968, CVE-2019-4046)
Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilities due to remote attacks, sensitive information exposure, and Denial of Service attacks. Vulnerability Details CVEID: CVE-2018-1902 DESCRIPTION: IBM WebSphere Application Server could allow a...
CVE-2017-1968
This CVE entry is rejected/not used; the candidate number was not assigned to any issues.
gambling-affiliation.com XSS vulnerability
Vulnerable URL: https://www.gambling-affiliation.com/tracking/visuels/1968.swf?clickTAG=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 112928 VI...
openSUSE Security Update : Firefox (openSUSE-2016-334)
This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues : MozillaFirefox was updated to Firefox 45.0 boo969894 - requires NSPR 4.12 / NSS 3.21.1 - Instant browser tab sharing through Hello - Synced Tabs button in button bar - Tabs synced via Firefox Accounts from othe...
DEBIAN-CVE-2016-1968
Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted data with brotli compression...
CVE-2016-1968
Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted data with brotli compression...
CVE-2016-1968
CVE-2016-1968: An integer underflow in Brotli decompression used by Mozilla Firefox prior to 45.0 can be triggered by crafted brotli data, leading to remote code execution or a denial of service. The issue is documented in MFSA 2016-30 (CVE-2016-1968) and was addressed by Firefox 45.0, with relat...
CVE-2016-1968
Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted data with brotli compression...
CVE-2016-1968
Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted data with brotli compression...