Lucene search
+L

445 matches found

OSV
OSV
added 2017/01/31 10:59 p.m.32 views

CVE-2016-6329

OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack...

5.9CVSS6.5AI score
SaveExploits0References10
Debian CVE
Debian CVE
added 2017/01/31 10:00 p.m.85 views

CVE-2016-6329

Removed by vendor...

5.9CVSS6.2AI score0.05687EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2017/01/31 12:00 a.m.49 views

CVE-2016-6329

OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack...

5.9CVSS6.6AI score0.05687EPSS
SaveExploits0References4
Citrix
Citrix
added 2017/01/24 12:00 a.m.15 views

Director Error "Cannot retrieve data. Data source unresponsive or reported an error".

The following error is seen in the event viewer of the Director server: Log Name: Application Source: Citrix Director Service Date: 1/20/2017 11:05:33 AM Event ID: 5 Task Category: None Level: Error Keywords: Classic User: N/A Computer: CtxDirector.RepLab.Local Description: The description for...

6.5AI score
SaveExploits0
OSV
OSV
added 2017/01/23 9:59 p.m.10 views

DEBIAN-CVE-2016-4055

The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service CPU consumption via a long string, aka a "regular expression Denial of Service ReDoS."...

6.5CVSS6.8AI score0.09905EPSS
SaveExploits1References1
OSV
OSV
added 2017/01/23 9:59 p.m.12 views

UBUNTU-CVE-2016-4055

The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service CPU consumption via a long string, aka a "regular expression Denial of Service ReDoS."...

6.5CVSS6.7AI score0.09905EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2017/01/23 12:00 a.m.17 views

PT-2017-8452

Name of the Vulnerable Software and Affected Versions moment versions prior to 2.11.2 Description The duration function in the moment package allows remote attackers to cause a denial of service CPU consumption via a long string, also known as a "regular expression Denial of Service ReDoS". This...

7.8CVSS6.4AI score0.09905EPSS
SaveExploits1References31
Citrix
Citrix
added 2017/01/19 12:00 a.m.13 views

Director does not show Logon Duration for all sessions

When viewing "Average Logon Duration" not all connections are visible...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2016/10/16 12:00 a.m.16 views

How to change the Sync duration of Apple DEP server and Xenmobile 10.x server.

To change the Sync duration of Apple DEP server and Xenmobile 10 server. The default syncduration is 1440 minutes...

6.8AI score
SaveExploits0
OSV
OSV
added 2016/09/01 12:59 a.m.7 views

ALPINE-CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS8.7AI score0.95707EPSS
SaveExploits7References1
AlpineLinux
AlpineLinux
added 2016/09/01 12:00 a.m.83 views

CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS6.9AI score0.95707EPSS
SaveExploits7
CNVD
CNVD
added 2016/04/24 12:00 a.m.12 views

Joyent Node.js moment denial of service vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A denial of service vulnerability exists in Joyent Node.js moment due to a failure of the moment.duration function to check input, allowing remote attackers to submit special regular expressions for denial...

7.8CVSS8.5AI score0.09905EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2016/03/01 12:00 a.m.30 views

openSUSE Security Update : dhcp (openSUSE-2016-284)

This update for dhcp fixes the following issues : - CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally bsc961305 The following bugs were fixed : - bsc936923: Improper...

6.5CVSS6.9AI score0.62264EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2016/02/29 12:00 a.m.28 views

openSUSE Security Update : dhcp (openSUSE-2016-279)

This update for dhcp fixes the following issues : - CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally boo961305 The following bugs were fixed : - boo936923: Improper...

6.5CVSS6.8AI score0.62264EPSS
SaveExploits0References12
OSV
OSV
added 2016/02/22 1:36 p.m.13 views

SUSE-SU-2016:0541-1 Security update for dhcp

This update for dhcp fixes the following issues: - CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally bsc961305 The following bugs were fixed: - bsc936923: Improper...

6.5CVSS6.5AI score0.62264EPSS
SaveExploits0References7
OSV
OSV
added 2016/02/22 1:35 p.m.17 views

SUSE-SU-2016:0540-1 Security update for dhcp

This update for dhcp fixes the following issues: - CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally bsc961305 The following bugs were fixed: - bsc936923: Improper...

6.5CVSS6.5AI score0.62264EPSS
SaveExploits0References14
OSV
OSV
added 2016/02/16 5:34 p.m.21 views

SUSE-SU-2016:0481-1 Security update for dhcp

This update for dhcp fixes the following issues: - CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally bsc961305 The following bugs were fixed: - bsc936923: Improper...

6.5CVSS6.5AI score0.62264EPSS
SaveExploits0References9
Openbugbounty
Openbugbounty
added 2015/10/16 8:12 p.m.21 views

press.uchicago.edu XSS vulnerability

Open Bug Bounty ID: OBB-92656 Description| Value ---|--- Affected Website:| press.uchicago.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Oracle linux
Oracle linux
added 2015/03/11 12:00 a.m.74 views

ipa security, bug fix, and enhancement update

4.1.0-18.0.1 - Replace login-screen-logo.png 20362818 - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png 4.1.0-18 - Fix ipa-pwd-extop global configuration caching 1187342 - group-detach does not add correct...

4.3CVSS0.1AI score0.18351EPSS
SaveExploits1
Veeam
Veeam
added 2015/03/10 12:00 a.m.51 views

How to Simulate Veeam Backup & Replication Disk I/O

Purpose This article provides examples of using common workload simulators diskspd and fio to simulate Veeam Backup & Replication disk I/O. Do Not Send Test Output Files to Veeam Support The write test output files testfile.dat do not contain diagnostic data. As such, please do not attach them to...

6.3AI score
SaveExploits0
Rows per page
Query Builder