Lucene search
+L

164 matches found

CBLMariner
CBLMariner
added 2022/06/03 5:54 p.m.26 views

CVE-2021-3618 affecting package nginx for versions less than 1.20.2-2

CVE-2021-3618 affecting package nginx for versions less than 1.20.2-2. A patched version of the package is available...

7.4CVSS7.6AI score0.02036EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2022/05/12 2:16 a.m.36 views

CVE-2021-3618 affecting package vsftpd 3.0.3-11

CVE-2021-3618 affecting package vsftpd 3.0.3-11. An upgraded version of the package is available that resolves this issue...

7.4CVSS7.9AI score0.02036EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2022/05/12 2:16 a.m.32 views

CVE-2021-3618 affecting package nginx 1.20.1-2

CVE-2021-3618 affecting package nginx 1.20.1-2. A patched version of the package is available...

7.4CVSS8AI score0.02036EPSS
SaveExploits0
OSV
OSV
added 2022/05/11 11:3 a.m.3 views

OESA-2022-1637 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as...

7.4CVSS6.9AI score0.02036EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.34 views

Ubuntu: Security Advisory (USN-5371-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.02599EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/28 8:34 a.m.11 views

USN-5371-2 nginx vulnerability

USN-5371-1 fixed several vulnerabilities in nginx. This update provides the fix for CVE-2021-3618 for Ubuntu 22.04 LTS. Original advisory details: It was discovered that nginx Lua module mishandled certain inputs. An attacker could possibly use this issue to perform an HTTP Request Smuggling...

7.4CVSS7.1AI score0.02036EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/04/28 12:0 a.m.120 views

Ubuntu 22.04 LTS : nginx vulnerability (USN-5371-2)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5371-2 advisory. USN-5371-1 fixed several vulnerabilities in nginx. This update provides the fix for CVE-2021-3618 for Ubuntu 22.04 LTS. Tenable has extracted the preceding...

7.4CVSS7.6AI score0.02036EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/14 12:0 a.m.36 views

Ubuntu: Security Advisory (USN-5371-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.02599EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/11 4:59 p.m.7 views

CLSA-2022-1649696379 Fix of CVE: CVE-2021-3618

CVE-2021-3618: drop the connection after reaching the specified number of invalid protocol commmands...

7.4CVSS7.1AI score0.02036EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/11 4:58 p.m.10 views

CLSA-2022-1649696332 Fix of CVE: CVE-2021-3618

CVE-2021-3618: drop the connection after reaching the specified number of invalid protocol commmands...

7.4CVSS7.1AI score0.02036EPSS
SaveExploits0References1
CloudLinux
CloudLinux
added 2022/04/11 4:46 p.m.198 views

Fix of CVE: CVE-2021-3618

CVE-2021-3618: drop the connection after reaching the specified number of invalid protocol commmands...

7.4CVSS2.4AI score0.02036EPSS
SaveExploits0References1
CBLMariner
CBLMariner
added 2022/04/09 3:40 p.m.11 views

CVE-2014-3618 affecting package procmail for versions less than 3.22-53

CVE-2014-3618 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

7.5CVSS9.6AI score0.08525EPSS
SaveExploits1
CBLMariner
CBLMariner
added 2022/04/09 3:40 p.m.19 views

CVE-2014-3618 affecting package procmail for versions less than 3.22-53

CVE-2014-3618 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

7.5CVSS9.6AI score0.08525EPSS
SaveExploits1
OSV
OSV
added 2022/03/23 8:15 p.m.8 views

AZL-9220 CVE-2021-3618 affecting package sendmail 8.15.2-46

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic fr...

7.4CVSS7.1AI score0.02036EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/23 12:0 a.m.3668 views

CVE-2021-3618

ALPACA (CVE-2021-3618) is an application-layer protocol content confusion attack affecting multiple assets (e.g., nginx, vsftpd, sendmail) where TLS servers configured for different protocols with compatible certificates can allow a MITM attacker to redirect subdomain traffic to another, potentia...

7.4CVSS7.5AI score0.02036EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.10 views

Mageia: Security Advisory (MGASA-2014-0373)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.08525EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/10/26 12:0 a.m.35 views

Huawei EulerOS: Security Advisory for nginx (EulerOS-SA-2021-2599)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.53461EPSS
SaveExploits11References2
Tenable Nessus
Tenable Nessus
added 2021/09/27 12:0 a.m.39 views

EulerOS 2.0 SP5 : nginx (EulerOS-SA-2021-2513)

According to the versions of the nginx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible...

7.4CVSS7.5AI score0.02036EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.8 views

SUSE: Security Advisory (SUSE-SU-2014:1137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.08525EPSS
SaveExploits1References2
NVD
NVD
added 2020/06/02 3:15 p.m.23 views

CVE-2020-3618

NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, QCA8081, SC8180X, SXR2130...

7.8CVSS7.7AI score0.00211EPSS
SaveExploits0References1
Rows per page
Query Builder