4427 matches found
Downloads Resources over HTTP
Overview Affected versions of ipip insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...
AIX 7.1 TL 3 : bind (IV89830) (deprecated)
https://vulners.com/cve/CVE-2016-2776 https://vulners.com/cve/CVE-2016-2776 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request. By sending a specially crafted DNS packet, a remote...
AIX 5.3 TL 12 : bind (IV90056) (deprecated)
https://vulners.com/cve/CVE-2016-2776 https://vulners.com/cve/CVE-2016-2776 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request. By sending a specially crafted DNS packet, a remote...
php: openssl_random_pseudo_bytes() is not cryptographically secure
The opensslrandompseudobytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RANDpseudobytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified...
Juniper JUNOSe IPv6 Packet Handling Line Card Reset Remote DoS (JSA10767) (deprecated)
According to its version, the remote Juniper E-eries device is affected by a denial of service vulnerability in the IPv6 support component due to improper handling IPv6 packets. An unauthenticated, remote attacker can exploit this, via a specially crafted IPv6 packet, to cause the line card to...
CVE-2016-6445
A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of the Cisco Meeting Server CMS before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XM...
AIX 5.3 TL 12 : nettcp (IV88957) (SLOTH) (deprecated)
https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...
AIX 7.1 TL 3 : nettcp (IV82331) (SLOTH) (deprecated)
https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...
Transport Layer Security (TLS) Version 1.1
Transport Layer Security TLS is a cryptographic protocol meant to provide security and data integrity for communications over TCP/IP networks. TLSv1.1 is considered obsolete and insecure, and is deprecated in favor of a more advanced TLS protocol. This protection will detect and block any use of...
Transport Layer Security (TLS) Version 1.0
Transport Layer Security TLS is a cryptographic protocol meant to provide security and data integrity for communications over TCP/IP networks. TLSv1.0 is considered obsolete and insecure, and is deprecated in favor of a more advanced TLS protocol. This protection will detect and block any use of...
Solaris 10 (sparc) : 147219-01 (deprecated)
SunOS 5.10: libgphoto2.so.2.0.3 patch. Date this patch was last updated by Sun : Jan/17/12 This plugin has been deprecated and either replaced with individual 147219 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...
Solaris 10 (x86) : 147220-01 (deprecated)
SunOS 5.10x86: libgphoto2.so.2.0.3 patch. Date this patch was last updated by Sun : Jan/17/12 This plugin has been deprecated and either replaced with individual 147220 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...
Solaris 10 (x86) : 145639-11 (deprecated)
Oracle Solaris Cluster 3.3: SC Checks / sccheck Patch for Oracle S. Date this patch was last updated by Sun : Jan/08/18 This plugin has been deprecated and either replaced with individual 145639 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@...
Solaris 10 (sparc) : 145638-11 (deprecated)
Oracle Solaris Cluster 3.3: SC Checks / sccheck Patch for Oracle S. Date this patch was last updated by Sun : Jan/08/18 This plugin has been deprecated and either replaced with individual 145638 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@...
Facebook Detection - UDP #3 (deprecated)
Binary data 5884.prm...
imansearch.com XSS vulnerability
Vulnerable URL: http://imansearch.com/ Deprecated: Function eregireplace is deprecated in /home3/zaneer/publichtml/imansearch/include/searchfuncs.php on line 45 Deprecated: Function eregireplace is deprecated in /home3/zaneer/publichtml/imansearch/include/searchfuncs.php on line 45 Deprecated:...
AIX 7.2 TL 0 : ntp (IV87939) (deprecated)
NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...
AIX 6.1 TL 9 : ntp (IV87419) (deprecated)
NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...
[SECURITY] Fedora 23 Update: lcms2-2.8-2.fc23
LittleCMS intends to be a small-footprint, speed optimized color management engine in open source form. LCMS2 is the current version of LCMS, and can be parallel installed with the original deprecated lcms...