Lucene search
+L

6605 matches found

Github Security Blog
Github Security Blog
•added 2023/11/09 6:34 p.m.•29 views

esptool allows attackers to view sensitive information via weak cryptographic algorithm

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS5.9AI score0.0048EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2023/11/09 6:34 p.m.•52 views

AsyncSSH Rogue Extension Negotiation

Summary An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack. Details The rogue extension negotiation attack targets an AsyncSSH client connecting to any SSH server sending an extension info message. The attack...

5.9CVSS7.2AI score0.00586EPSS
SaveExploits0References11Affected Software1
UbuntuCve
UbuntuCve
•added 2023/11/09 4:15 p.m.•37 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS6.8AI score0.0048EPSS
SaveExploits1References2
Prion
Prion
•added 2023/11/09 4:15 p.m.•21 views

Information disclosure

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

5CVSS6.5AI score0.0048EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
•added 2023/11/09 4:15 p.m.•11 views

PYSEC-2023-234

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS6.6AI score0.0048EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2023/11/09 4:15 p.m.•38 views

PYSEC-2023-234

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS5.9AI score0.0048EPSS
SaveExploits1References2
Malwarebytes
Malwarebytes
•added 2023/11/09 4:07 p.m.•41 views

Meta whistleblower says company has long ignored how it sexually endangers children

At a Senate hearing, a Meta whistleblower has revealed some shocking numbers around children’s experiences of its platforms. Arturo Béjar, a former engineering director at Meta, testified before the US Congress on Tuesday. Not only did he share his own daughters’ experience suffering harassment o...

7.1AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2023/11/09 12:00 a.m.•13 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

6.7AI score0.0048EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/11/09 12:00 a.m.•57 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.4AI score0.0048EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/11/09 12:00 a.m.•10 views

PT-2023-30256 · Esptool · Esptool

Name of the Vulnerable Software and Affected Versions: esptool version 4.6.2 Description: An issue in esptool allows attackers to view sensitive information due to the use of a weak cryptographic algorithm. Recommendations: For esptool version 4.6.2, at the moment, there is no information about a...

7.5CVSS5.2AI score0.0048EPSS
SaveExploits1References11
CVE
CVE
•added 2023/11/09 12:00 a.m.•86 views

CVE-2023-46894

Affected software: esptool 4.6.2. The CVE-2023-46894 entry describes an information disclosure due to a weak cryptographic algorithm used by esptool, enabling attackers to view sensitive data. The public documents confirm the vulnerability and its impact on confidentiality (CVE base score 7.5, HI...

7.5CVSS7.1AI score0.0048EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2023/11/09 12:00 a.m.•26 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.3AI score
SaveExploits0References3
Debian CVE
Debian CVE
•added 2023/11/09 12:00 a.m.•103 views

CVE-2023-46894

Removed by vendor...

7.5CVSS6.1AI score0.0048EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2023/11/09 12:00 a.m.•32 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-3113)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.1AI score0.03566EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2023/11/07 8:56 a.m.•18 views

libssh: NULL pointer dereference during rekeying with algorithm guessing

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service...

6.5CVSS6.7AI score0.01314EPSS
SaveExploits0References5
OSV
OSV
•added 2023/11/07 12:00 a.m.•40 views

ALSA-2023:6643 Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: NULL pointer dereference during rekeying with algorithm guessing CVE-2023-1667 libssh: authorization bypass in pkiverifydatasignature CVE-2023-2283 For more...

6.5CVSS6.4AI score0.01314EPSS
SaveExploits2References6
AlmaLinux
AlmaLinux
•added 2023/11/07 12:00 a.m.•51 views

Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: NULL pointer dereference during rekeying with algorithm guessing CVE-2023-1667 libssh: authorization bypass in pkiverifydatasignature CVE-2023-2283 For more...

6.5CVSS7.1AI score0.01314EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
•added 2023/11/07 12:00 a.m.•158 views

Rocky Linux 8 : llvm-toolset:rhel8 (RLSA-2021:4743)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4743 advisory. - DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
•added 2023/11/07 12:00 a.m.•34 views

Rocky Linux 8 : binutils (RLSA-2021:4595)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4595 advisory. - DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
•added 2023/11/07 12:00 a.m.•43 views

Rocky Linux 8 : gcc (RLSA-2021:4587)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4587 advisory. - DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References3
Rows per page
Query Builder