Lucene search
+L

531 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:02 a.m.38 views

Security Bulletin: Vulnerability in SSLv3 affects WebSphere Lombardi Edition (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in WebSphere Lombardi Edition. Vulnerability Details CVE-ID: CVE-2014-3566 DESCRIPTION: WebSphere Lombardi Edition could allow a remote attacker t...

4.3CVSS0.6AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:02 a.m.9 views

Security Bulletin: Vulnerability in SSLv3 affects IBM Business Process Manager (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM Business Process Manager. Vulnerability Details CVE-ID : CVE-2014-3566 DESCRIPTION : IBM Business Process Manager could allow a remote...

4.3CVSS6.3AI score0.99999EPSS
SaveExploits7Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:02 a.m.55 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Message Broker shipped with IBM WebSphere Remote Server (CVE-2014-3566 and CVE-ID: CVE-2014-3568)

Summary IBM WebSphere Message Broker is shipped as a component of IBM WebSphere Remote Server. Information about a security vulnerability affecting IBM WebSphere Message Broker has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

4.3CVSS6.4AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:02 a.m.21 views

Security Bulletin: Vulnerability in SSLv3 affects IBM Monitoring and Diagnostic Tools for Java - Health Center (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 may be used in connections between Health Center Clients and Agents. Vulnerability Details CVE-ID : CVE-2014-3566 DESCRIPTION : Health Center could allow a...

4.3CVSS6.3AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:02 a.m.32 views

Security Bulletin: Vulnerability in SSLv3 affects IBM WebSphere Application Server shipped with IBM SOA Policy Gateway Pattern for AIX Server 2.5

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled by default in IBM WebSphere Application Server. Vulnerability Details CVE ID: CVE-2014-3566 DESCRIPTION: IBM WebSphere Application could allow a...

4.3CVSS0.7AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:01 a.m.11 views

Security Bulletin: Vulnerability in SSLv3 affects IBM WebSphere Application Server that shipped with WebSphere Enterprise Service Bus Registry Edition (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled by default in IBM WebSphere Application Server, which is shipped with WebSphere Enterprise Service Bus Registry Edition Vulnerability Details CVE...

4.3CVSS0.4AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:01 a.m.10 views

Security Bulletin: Vulnerability in SSLv3 affects IBM WebSphere Application Server that shipped with WebSphere Enterprise Service Bus for z/OS (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled by default in IBM WebSphere Application Server, which is shipped with WebSphere Enterprise Service Bus for z/OS Vulnerability Details CVE ID:...

4.3CVSS6.3AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:01 a.m.17 views

Security Bulletin: Vulnerability in SSLv3 affects IBM WebSphere Application Server that shipped with WebSphere Enterprise Service Bus (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled by default in IBM WebSphere Application Server, which is shipped with WebSphere Enterprise Service Bus. Vulnerability Details CVE ID: CVE-2014-356...

4.3CVSS0.6AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:01 a.m.17 views

Security Bulletin: Vulnerability in SSLv3 affects IBM Support Assistant Team Server (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM® Support Assistant Team Server. Vulnerability Details CVE-ID : CVE-2014-3566 DESCRIPTION : Product could allow a remote attacker to obtain...

4.3CVSS6.3AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:01 a.m.36 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Application Server October 2014 CPU

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server. This also includes a fix for the Padding Oracle On Downgraded Legacy Encryption POODLE SSLv3 vulnerability CVE-2014-3566. These issues were disclosed as part of t...

10CVSS0.8AI score0.99999EPSS
SaveExploits8Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:01 a.m.25 views

Security Bulletin: Vulnerability in SSLv3 affects WebSphere eXtreme Scale and WebSphere eXtreme Scale for z/OS versions 7.0, 7.1.0, 7.1.1, 8.5, and 8.6. (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in WebSphere eXtreme Scale and WebSphere eXtreme Scale for z/OS versions 7.0, 7.1.0, 7.1.1, 8.5, and 8.6. Vulnerability Details CVE-ID:...

4.3CVSS0.6AI score0.99999EPSS
SaveExploits7Affected Software1
CVE
CVE
added 2018/04/03 5:00 p.m.50 views

CVE-2018-3566

CVE-2018-3566 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF linux kernels prior to the 2018-04-05 security patch level. Root cause: a buffer overwrite in ProcSetReqInternal() caused by a missing length check. The issue is categorized as Elevation of Privile...

7.8CVSS7.2AI score0.00372EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:00 a.m.127 views

Solaris 10 (sparc) : 142824-24 (POODLE)

Indexing and Search Service 1u5-24.12700: core patch. Date this patch was last updated by Sun : Mar/24/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

4.3CVSS6.7AI score0.99999EPSS
SaveExploits7References2
Hacker One
Hacker One
added 2018/02/22 4:43 p.m.271 views

Semrush: SSLv3 Poodle Attack on Ip Of semrush

Summary: POODLE SSLv3 bug on multiple servers Description: CVE-2014-3566: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka...

4.3CVSS5.1AI score0.99999EPSS
SaveExploits7
OpenVAS
OpenVAS
added 2018/02/14 12:00 a.m.64 views

Ubuntu: Security Advisory (USN-3566-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.79949EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2018/02/13 12:00 a.m.76 views

Ubuntu 14.04 LTS : PHP vulnerabilities (USN-3566-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3566-1 advisory. It was discovered that PHP incorrectly handled the PHAR 404 error page. A remote attacker could possibly use this issue to conduct cross-site scripting X...

9.8CVSS6.8AI score0.79949EPSS
SaveExploits3References4
Hacker One
Hacker One
added 2017/11/09 9:44 p.m.124 views

X (Formerly Twitter): POODLE SSLv3 bug on multiple twitter smtp servers (mx3.twitter.com,199.59.148.204,199.16.156.108 and 199.59.148.204)

Summary: POODLE SSLv3 bug on multiple twitter smtp servers Description: CVE-2014-3566: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle...

4.3CVSS5.2AI score0.99999EPSS
SaveExploits7
Circl
Circl
added 2017/10/09 6:29 p.m.17 views

CVE-2014-3566

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2022-03-08 04:13:09+00:00| seen| Telegram/vucuqGbRCztQDBt8wgDth-hLVvGp8dTTlxQcNvjhW5htig 2022-11-07 22:22:31+00:00| seen|...

4.3CVSS6.7AI score0.99999EPSS
SaveExploits7References15
Tenable Nessus
Tenable Nessus
added 2017/07/20 12:00 a.m.567 views

Oracle Database Multiple Vulnerabilities (July 2017 CPU) (POODLE) (SWEET32)

The remote Oracle Database Server is missing the July 2017 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting...

9.9CVSS7.1AI score0.99999EPSS
SaveExploits14References10
Tenable Nessus
Tenable Nessus
added 2017/05/17 12:00 a.m.101 views

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3566)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3566 advisory. - nfsd: stricter decoding of write-like NFSv2/v3 ops J. Bruce Fields Orabug: 25986990 CVE-2017-7895 - KVM: x86: fix emulation of 'MOV SS, null...

10CVSS6.7AI score0.12824EPSS
SaveExploits12References13
Rows per page
Query Builder