Lucene search
+L

349 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.3 views

Malicious code in wlwz-2312-2808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deb9710a8149e3743d4224edbfc4bb1793ddfd32835c96eddb7cd5a58d75c100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Circl
Circl
added 2023/11/15 4:53 p.m.8 views

CVE-2019-2808

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| seen| https://t.me/BABATATASASA/5989...

4.9CVSS6.2AI score0.02008EPSS
SaveExploits0References1
Circl
Circl
added 2023/05/29 2:36 p.m.9 views

CVE-2023-2808

creationtimestamp| type| source ---|---|--- 2023-05-29 14:36:00+00:00| seen| https://t.me/cibsecurity/64759...

5.3CVSS5.5AI score0.00408EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/29 10:15 a.m.17 views

CVE-2023-2808

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

5.3CVSS4.8AI score0.00408EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/05/29 9:07 a.m.32 views

CVE-2023-2808 Lack of URL normalization allows rendering previews for disallowed domains

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

4.3CVSS5.5AI score0.00408EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/29 9:07 a.m.13 views

CVE-2023-2808 Lack of URL normalization allows rendering previews for disallowed domains

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

4.3CVSS6.8AI score0.00408EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.27 views

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM BladeCenter S SAS RAID Module Firmware (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah Attack" for SSL/TLS affects IBM BladeCenter S SAS RAID Module Firmware. Vulnerability Details Summary The RC4 "Bar Mitzvah Attack" for SSL/TLS affects IBM BladeCenter S SAS RAID Module Firmware. Vulnerability Details: CVE-ID: CVE-2015-2808 Description: The RC4...

5CVSS6.6AI score0.73851EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.32 views

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM BladeCenter Switches (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects IBM BladeCenter Switches. Vulnerability Details Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects IBM BladeCenter Switches. Vulnerability Details CVE-ID: CVE-2015-2808 Description: The RC4 algorithm, as used in the TLS protocol and S...

5CVSS6.7AI score0.73851EPSS
SaveExploits0Affected Software4
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/29 1:48 a.m.57 views

Security Bulletin: Vulnerabilities in IBM Java SDK affects IBM SAN Volume Controller and Storwize Family (CVE-2015-0488, CVE-2015-2808, CVE-2015-1916, CVE-2015-0204)

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 that is used by IBM SAN Volume Controller and Storwize Family. These issue was disclosed as part of the IBM Java SDK updates in Apr 2015. Vulnerability Details CVEID:CVE-2015-0488 DESCRIPTION: An...

5CVSS7.1AI score0.98685EPSS
SaveExploits0Affected Software5
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/29 1:48 a.m.33 views

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM SAN Volume Controller and Storwize Family (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM SAN Volume Controller and Storwize Family Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacke...

5CVSS6.8AI score0.73851EPSS
SaveExploits0Affected Software5
F5 Networks
F5 Networks
added 2023/02/21 7:00 p.m.63 views

K10754336: MySQL vulnerabilities CVE-2019-2808, CVE-2019-2810, CVE-2019-2811, CVE-2019-2812, and CVE-2019-2814

Security Advisory Description CVE-2019-2808 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

6.5CVSS4.8AI score0.02085EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 6:30 p.m.54 views

K16864: SSL/TLS RC4 vulnerability CVE-2015-2808

Security Advisory Description The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream...

5CVSS4.9AI score0.73851EPSS
SaveExploits0Affected Software22
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/18 1:45 a.m.35 views

Security Bulletin: Vulnerability in RC4 stream cipher affects the IBM FlashSystem models 840 and 900 (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects the IBM® FlashSystem™ 840 and IBM FlashSystem 900. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An...

5CVSS6.8AI score0.73851EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/18 1:45 a.m.30 views

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM FlashSystem 840 and IBM FlashSystem V840, -AE1 models. (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects the IBM FlashSystem 840. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this...

5CVSS6.8AI score0.73851EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:46 a.m.6 views

SUSE CVE-2012-2808

The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a...

5CVSS8.8AI score0.01269EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:05 a.m.6 views

SUSE CVE-2016-2808

The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code or cause a denial of service generation-count overflow, out-of-bounds HashMap write access, and...

7.5CVSS7.7AI score0.02064EPSS
SaveExploits0References10
Circl
Circl
added 2022/12/02 2:36 p.m.11 views

CVE-2022-2808

creationtimestamp| type| source ---|---|--- 2022-12-02 14:36:47+00:00| seen| https://t.me/cibsecurity/53796...

8.8CVSS8.1AI score0.00656EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/02 12:15 p.m.28 views

CVE-2022-2808

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11...

8.8CVSS0.00656EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/15 6:50 p.m.17 views

Security Bulletin: Vulnerability in RC4 stream cipher affects WebSphere Process Server (WPS) and WPS Hypervisor editions (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” attack for SSL/TLS affects IBM WebSphere Application Server that is used by WebSphere Process Server WPS and WPS Hypervisor editions. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow ...

5CVSS6.6AI score0.73851EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/08 12:09 a.m.45 views

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM HTTP Server and Caching Proxy (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" SSL/TLS may affect some configurations of the IBM HTTP Server and some configurations of the IBM Caching Proxy for WebSphere Application Server. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol,...

5CVSS6.4AI score0.73851EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder