Lucene search
+L

119 matches found

OpenVAS
OpenVAS
added 2016/06/08 12:00 a.m.27 views

Fedora Update for dhcp FEDORA-2016-3e64b32a91

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.2AI score0.73622EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/05/05 12:00 a.m.24 views

Fedora 23 : dhcp-4.3.3-9.P1.fc23 (2016-c93d49faf3)

Security fix for CVE-2016-2774 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

7.1CVSS6.6AI score0.73622EPSS
SaveExploits0References3
OSV
OSV
added 2016/04/07 9:59 p.m.13 views

CVE-2015-2774

Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 aka POODLE...

5.9CVSS4.2AI score
SaveExploits0References8
Cvelist
Cvelist
added 2016/04/07 9:00 p.m.38 views

CVE-2015-2774

Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 aka POODLE...

4.8AI score0.01899EPSS
SaveExploits0References8
CVE
CVE
added 2016/04/07 9:00 p.m.108 views

CVE-2015-2774

Technical details for CVE-2015-2774 are not publicly available in the provided connected documents. The materials reference POODLE-related padding oracle (CVE-2014-3566) but do not supply product/version/root-cause/fix information for CVE-2015-2774. Monitor for updates.

5.9CVSS4.6AI score0.01899EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2016/03/09 3:59 p.m.27 views

CVE-2016-2774

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service INSIST assertion failure or request-processing outage by establishing many sessions...

7.1CVSS5.9AI score0.73622EPSS
SaveExploits0References10
OSV
OSV
added 2016/03/09 3:59 p.m.9 views

CVE-2016-2774

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service INSIST assertion failure or request-processing outage by establishing many sessions...

5.9CVSS5.6AI score
SaveExploits0References10
CVE
CVE
added 2016/03/09 3:26 p.m.200 views

CVE-2016-2774

CVE-2016-2774 affects ISC DHCP 4.1.x (before 4.1-ESV-R13), 4.2.x, and 4.3.x before 4.3.4, enabling DoS by opening many TCP sessions. Public advisories (IBM, Debian, Cloud Foundry/Ubuntu, Broadcom) confirm this vulnerability and document fixes: Debian Linux 4.3.1-6+deb8u4; IBM PowerKVM/Power i pat...

7.1CVSS5.7AI score0.73622EPSS
SaveExploits0References10Affected Software1
Debian CVE
Debian CVE
added 2016/03/09 3:26 p.m.45 views

CVE-2016-2774

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service INSIST assertion failure or request-processing outage by establishing many sessions...

7.1CVSS6.2AI score0.73622EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/02/24 12:00 a.m.21 views

openSUSE Security Update : erlang (openSUSE-2016-245)

This update for erlang fixes the following issues : - CVE-2015-2774: Erlang/OTP was vulnerable to Poodle in its TLS-1.0 implementation - removed default support for SSL 3.0 and added padding check for TLS 1.0 boo924915 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

5.9CVSS6.5AI score0.01899EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/10/21 12:00 a.m.49 views

Ubuntu: Security Advisory (USN-2774-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.9AI score0.01164EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/08/20 12:00 a.m.17 views

Fedora Update for erlang FEDORA-2015-12923

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.1AI score0.01899EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/08/18 12:00 a.m.24 views

Fedora 22 : erlang-17.4-4.fc22 (2015-12923)

Security fix for CVE-2015-2774 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

5.9CVSS6.5AI score0.01899EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2015/08/18 12:00 a.m.22 views

Fedora 21 : erlang-17.4-4.fc21 (2015-12970)

Security fix for CVE-2015-2774 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

5.9CVSS6.5AI score0.01899EPSS
SaveExploits0References3
Mageia
Mageia
added 2015/05/05 4:38 p.m.31 views

Updated erlang packages fix CVE-2015-2774

Updated erlang packages fix security vulnerability: Erlang's TLS-1.0 implementation failed to check padding bytes, leaving it vulnerable to an issue similar to POODLE CVE-2015-2774...

5.9CVSS6.4AI score0.01899EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2014/08/13 12:00 a.m.99 views

Microsoft Internet Explorer Multiple Vulnerabilities (2976627)

This host is missing a critical security update according to Microsoft Bulletin MS14-051. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS7.4AI score0.26349EPSS
SaveExploits0References33
CVE
CVE
added 2014/08/12 9:00 p.m.74 views

CVE-2014-2774

CVE-2014-2774 affects Microsoft Internet Explorer 6–11. The vulnerability allows remote attackers to trigger memory corruption via a crafted web site, leading to arbitrary code execution or a denial of service. Public exploits exist for this vulnerability. The issue is part of a broader set of IE...

9.3CVSS7.7AI score0.16528EPSS
SaveExploits0References5Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.20 views

NIPrint LPD Request Overflow

No description provided by source. $Id: niprint.rb 11407 2010-12-25 06:01:12Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2013/10/11 12:00 a.m.33 views

Debian DSA-2774-1 : gnupg2 - several vulnerabilities

Two vulnerabilities were discovered in GnuPG 2, the GNU privacy guard, a free PGP replacement. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-4351 When a key or subkey had its 'key flags' subpacket set to all bits off, GnuPG currently would treat t...

5.8CVSS7.7AI score0.0503EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2013/10/10 12:00 a.m.36 views

Debian Security Advisory DSA 2774-1 (gnupg2 - several vulnerabilities)

Two vulnerabilities were discovered in GnuPG 2, the GNU privacy guard, a free PGP replacement. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-4351When a key or subkey had its key flags subpacket set to all bits off, GnuPG currently would treat the key...

5.8CVSS8.1AI score0.0503EPSS
SaveExploits0References1
Rows per page
Query Builder