Lucene search
+L

9708 matches found

Vulnrichment
Vulnrichment
•added 2022/01/28 9:28 p.m.•65 views

CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

6.8AI score0.03772EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2022/01/28 9:28 p.m.•152 views

CVE-2021-4160

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

5.9CVSS6.7AI score0.03772EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/01/28 12:00 a.m.•219 views

OpenSSL 1.1.1 < 1.1.1m Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.1.1m. It is, therefore, affected by a vulnerability as referenced in the 1.1.1m advisory. - There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1....

5.9CVSS6.7AI score0.83645EPSS
SaveExploits1References4
OpenSSL
OpenSSL
•added 2022/01/28 12:00 a.m.•156 views

BN_mod_exp may produce incorrect results on MIPS

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

5.9CVSS6.6AI score0.83645EPSS
SaveExploits1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/28 12:00 a.m.•6 views

CVE-2021-4160: Undefined Security Weakness

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

5.9CVSS6.2AI score0.03772EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•28 views

Mageia: Security Advisory (MGASA-2021-0534)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.17563EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•40 views

Mageia: Security Advisory (MGASA-2017-0041)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.1AI score0.94697EPSS
SaveExploits13References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•19 views

Mageia: Security Advisory (MGASA-2013-0242)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.4AI score0.03447EPSS
SaveExploits4References8
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•21 views

Mageia: Security Advisory (MGASA-2013-0289)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6.7AI score0.01958EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•27 views

Mageia: Security Advisory (MGASA-2016-0208)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02812EPSS
SaveExploits0References5
FreeBSD
FreeBSD
•added 2022/01/28 12:00 a.m.•59 views

OpenSSL -- BN_mod_exp incorrect results on MIPS

The OpenSSL project reports: BNmodexp may produce incorrect results on MIPS Moderate There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the...

3.7CVSS6.5AI score0.83645EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2022/01/27 12:00 a.m.•37 views

Debian: Security Advisory (DSA-5061-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7AI score0.06964EPSS
SaveExploits1References6
OpenVAS
OpenVAS
•added 2022/01/26 12:00 a.m.•32 views

Debian: Security Advisory (DSA-5054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS8AI score0.85352EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/01/25 12:00 a.m.•2 views

PT-2022-38042

Уязвимость функции dsa switch bridge leave модуля net/dsa/switch.c поддержки коммутаторов с распределенной архитектурой ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отк...

7.8CVSS0.00249EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2022/01/22 12:00 a.m.•18 views

Debian: Security Advisory (DSA-5051-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00493EPSS
SaveExploits1References4
Cloud Foundry
Cloud Foundry
•added 2022/01/20 12:00 a.m.•66 views

USN-5168-1: NSS vulnerability | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS signatures. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute...

9.8CVSS7.6AI score0.17563EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2022/01/17 12:00 a.m.•28 views

Debian: Security Advisory (DSA-5048-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02544EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2022/01/16 12:00 a.m.•33 views

Debian DSA-5047-1 : prosody - security update

The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5047 advisory. Matthew Wild discovered that the WebSockets code in Prosody, a lightweight Jabber/XMPP server, was susceptible to denial of service. For the oldstable distribution...

7.5CVSS7.2AI score0.0541EPSS
SaveExploits1References6
OpenVAS
OpenVAS
•added 2022/01/16 12:00 a.m.•32 views

Debian: Security Advisory (DSA-5045-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.8AI score0.01354EPSS
SaveExploits6References4
Tenable Nessus
Tenable Nessus
•added 2022/01/15 12:00 a.m.•39 views

Debian DSA-5045-1 : thunderbird - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5045 advisory. Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable...

10CVSS7.8AI score0.01354EPSS
SaveExploits6References28
Rows per page
Query Builder