Lucene search
+L

101 matches found

UbuntuCve
UbuntuCve
added 2014/01/26 8:55 p.m.27 views

CVE-2013-6466

Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads...

5CVSS5.9AI score0.02664EPSS
SaveExploits1References3
OSV
OSV
added 2014/01/18 9:55 p.m.6 views

DEBIAN-CVE-2013-2037

httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary...

2.6CVSS6.9AI score0.01324EPSS
SaveExploits1References1
OSV
OSV
added 2014/01/18 9:55 p.m.7 views

CVE-2013-2037

httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary...

6.2AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2014/01/18 9:00 p.m.58 views

CVE-2013-2037

httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary...

2.6CVSS6.2AI score0.01324EPSS
SaveExploits1
Cvelist
Cvelist
added 2014/01/18 9:00 p.m.43 views

CVE-2013-2037

httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary...

6.1AI score0.01324EPSS
SaveExploits1References6
CVE
CVE
added 2014/01/18 9:00 p.m.83 views

CVE-2013-2037

CVE-2013-2037 affects the Python HTTP client library httplib2 versions up to 0.7.2/0.8 and earlier. Root cause: after the initial connection, the client does not verify that the server hostname matches the CN or subjectAltName in the server's X.509 certificate, enabling MITM via an arbitrary vali...

2.6CVSS6.3AI score0.01324EPSS
SaveExploits1References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/12/04 12:00 a.m.56 views

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2037-1)

A flaw was discovered in the Linux kernel's KVM kernel virtual machine. An administrative user in the guest OS could leverage this flaw to cause a denial of service in the host OS. CVE-2012-2121 Multiple integer overflow flaws where discovered in the Alchemy LCD frame- buffer drivers in the Linux...

6.9CVSS8AI score0.00596EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2013/12/04 12:00 a.m.30 views

Ubuntu: Security Advisory (USN-2037-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS7.2AI score0.00596EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:00 a.m.44 views

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2037)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2037 advisory. - netdrv be2net: Merge fixes for CVE-2011-3347 Joe Jin Tenable has extracted the preceding description block directly from the Oracle Linux securit...

7.8CVSS7.1AI score0.00923EPSS
SaveExploits14References10
OpenVAS
OpenVAS
added 2013/07/11 12:00 a.m.35 views

Adobe Air Multiple Vulnerabilities June-2012 (Windows)

This host is installed with Adobe Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeairmultvulnjun12win.nasl 8176 2017-12-19 12:50:00Z cfischer $ Adobe Air Multiple Vulnerabilities June-2012 Windows Authors: Thanga Prakash S Copyright: Copyright c 2013 Greenbone...

10CVSS0.9AI score0.078EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2013/07/11 12:00 a.m.33 views

Adobe Air Multiple Vulnerabilities June-2012 (Mac OS X)

This host is installed with Adobe Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeairmultvulnjun12macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Adobe Air Multiple Vulnerabilities June-2012 Mac OS X Authors: Thanga Prakash S Copyright: Copyright c 2013 Greenbo...

10CVSS0.8AI score0.078EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2013/07/11 12:00 a.m.26 views

Adobe Air Multiple Vulnerabilities (Jun 2012) - Windows

Adobe Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:adobeair"; ifdescription...

9.3CVSS7.6AI score0.078EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2013/05/28 12:00 a.m.23 views

Mandriva Linux Security Advisory : python-httplib2 (MDVSA-2013:168)

Updated python-httplib2 packages fix security vulnerability : httplib2 only validates SSL certificates on the first request to a connection, and doesn't report validation failures on subsequent requests CVE-2013-2037. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

2.6CVSS5.4AI score0.01324EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2013/05/02 12:00 a.m.24 views

CVE-2013-2037

httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary...

2.6CVSS5.9AI score0.01324EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2012/12/13 12:00 a.m.34 views

SuSE Update for flash-player openSUSE-SU-2012:0723-1 (flash-player)

Check for the Version of flash-player OpenVAS Vulnerability Test $Id: gbsuse201207231.nasl 8245 2017-12-26 06:29:59Z teissa $ SuSE Update for flash-player openSUSE-SU-2012:0723-1 flash-player Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

10CVSS6.3AI score0.078EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2012/08/10 12:00 a.m.32 views

FreeBSD Ports: linux-f10-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 38195f00-b215-11e1-8132-003067b2972c OpenVAS Vulnerability Test $ Description: Auto generated from VID 38195f00-b215-11e1-8132-003067b2972c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

10CVSS0.4AI score0.078EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2012/08/10 12:00 a.m.33 views

Gentoo Security Advisory GLSA 201206-21 (Adobe Flash Player)

The remote host is missing updates announced in advisory GLSA 201206-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

10CVSS1AI score0.8412EPSS
SaveExploits11
OpenVAS
OpenVAS
added 2012/06/20 12:00 a.m.30 views

Adobe Flash Player Multiple Vulnerabilities (Jun 2012) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

9.3CVSS8.3AI score0.078EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2012/06/20 12:00 a.m.28 views

Adobe Flash Player Multiple Vulnerabilities (Jun 2012) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.7AI score0.078EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2012/06/13 12:00 a.m.38 views

RHEL 5 / 6 : flash-plugin (RHSA-2012:0722)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:0722 advisory. - flash-plugin: multiple code execution flaws APSB12-14 CVE-2012-2034, CVE-2012-2035, CVE-2012-2036, CVE-2012-2037, CVE-2012-2039 -...

9.3CVSS6.2AI score0.078EPSS
SaveExploits1References12
Rows per page
Query Builder