Lucene search
+L

4800 matches found

OSV
OSV
added 2024/09/13 6:46 a.m.22 views

RHSA-2010:0166 Red Hat Security Advisory: gnutls security update

Bulletin has no description...

9.8CVSS6.5AI score0.87264EPSS
SaveExploits16References12
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:00 a.m.8 views

The vulnerability of the gnutls_rnd() function in the Samba networking software package, related to the use of insufficiently random values, allows a attacker to access confidential data.

The vulnerability of the gnutlsrnd function in the Samba networking software package is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

5.5CVSS6.2AI score0.00417EPSS
SaveExploits1References10Affected Software5
OSV
OSV
added 2024/09/12 8:13 p.m.12 views

RHSA-2024:2044 Red Hat Security Advisory: gnutls security update

Bulletin has no description...

5.3CVSS6.7AI score0.00724EPSS
SaveExploits0References9
OSV
OSV
added 2024/09/12 8:13 p.m.9 views

RHSA-2024:1997 Red Hat Security Advisory: gnutls security update

Bulletin has no description...

5.3CVSS6.7AI score0.00724EPSS
SaveExploits0References9
OSV
OSV
added 2024/09/12 8:11 p.m.12 views

RHSA-2024:1784 Red Hat Security Advisory: gnutls security update

Bulletin has no description...

5.3CVSS6.7AI score0.00724EPSS
SaveExploits0References9
F5 Networks
F5 Networks
added 2024/09/12 4:05 p.m.30 views

K000141041: GnuTLS vulnerabilities CVE-2024-28834 and CVE-2024-28835

Security Advisory Description CVE-2024-28834 A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLSPRIVKEYFLAGREPRODUCIBLE flag...

5.3CVSS6.7AI score0.00724EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2024/09/12 12:00 a.m.23 views

openSUSE Security Advisory (SUSE-SU-2024:3204-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.7AI score0.00729EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2024/09/12 12:00 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2024:3211-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.00729EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/09/12 12:00 a.m.18 views

openSUSE Security Advisory (SUSE-SU-2024:3211-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.7AI score0.00729EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2024/09/12 12:00 a.m.25 views

SUSE SLED15: curl / libcurl-devel / libcurl-devel-32bit / libcurl4 / etc (SUSE-SU-2024:3211-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3211-1 advisory. - CVE-2024-8096: OCSP stapling bypass with GnuTLS. bsc1230093 Tenable has extracted the preceding...

6.5CVSS7AI score0.00729EPSS
SaveExploits1References4
OSV
OSV
added 2024/09/11 3:40 p.m.16 views

SUSE-SU-2024:3211-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-8096: OCSP stapling bypass with GnuTLS. bsc1230093...

6.5CVSS6.7AI score0.00729EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/09/11 10:03 a.m.32 views

CVE-2024-8096 OCSP stapling bypass with GnuTLS

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...

0.00729EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/09/11 10:03 a.m.22 views

CVE-2024-8096 OCSP stapling bypass with GnuTLS

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...

6.5AI score0.00729EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2024/09/11 10:03 a.m.33 views

CVE-2024-8096

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...

6.5CVSS7.5AI score0.00729EPSS
SaveExploits1
OSV
OSV
added 2024/09/11 8:55 a.m.13 views

SUSE-SU-2024:3204-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-8096: OCSP stapling bypass with GnuTLS. bsc1230093...

6.5CVSS6.7AI score0.00729EPSS
SaveExploits1References3
OSV
OSV
added 2024/09/11 8:55 a.m.18 views

SUSE-SU-2024:3203-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-8096: OCSP stapling bypass with GnuTLS. bsc1230093...

6.5CVSS6.7AI score0.00729EPSS
SaveExploits1References3
OSV
OSV
added 2024/09/11 8:54 a.m.21 views

SUSE-SU-2024:3202-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-8096: OCSP stapling bypass with GnuTLS. bsc1230093 - CVE-2024-7264: ASN.1 date parser overread. bsc1228535...

6.5CVSS6.5AI score0.17301EPSS
SaveExploits2References5
OSV
OSV
added 2024/09/11 8:00 a.m.30 views

CURL-CVE-2024-8096 OCSP stapling bypass with GnuTLS

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...

6.5CVSS6.6AI score0.00729EPSS
SaveExploits1
curl security advisories
curl security advisories
added 2024/09/11 8:00 a.m.69 views

OCSP stapling bypass with GnuTLS

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...

6.5CVSS7.4AI score0.00729EPSS
SaveExploits1References1Affected Software2
OpenVAS
OpenVAS
added 2024/09/11 12:00 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2024:3203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.7AI score0.00729EPSS
SaveExploits1References4
Rows per page
Query Builder