Lucene search
+L

10548 matches found

NVD
NVD
•added 2020/04/17 4:15 p.m.•27 views

CVE-2020-11876

airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-256 CBC context. NOTE: the vendor states that this initialization only occurs within unreachable code...

7.5CVSS7.6AI score0.01706EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/04/17 3:45 p.m.•37 views

CVE-2020-11877

airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector IV for AES-256 CBC encryption. NOTE: the vendor states that this IV is used only within unreachable code...

7.6AI score0.01563EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/04/17 12:00 a.m.•11 views

PT-2020-12911 · Zoom · Zoom Client For Meetings

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings version 4.6.11 Description: The issue concerns the use of a static Initialization Vector IV for AES-256 CBC encryption in the airhost.exe component. Specifically, the IV used is 3423423432325249. The vendor notes that...

7.5CVSS7AI score0.01563EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2020/04/15 2:03 p.m.•34 views

CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

7.5CVSS7AI score0.0434EPSS
SaveExploits1References3
Mageia
Mageia
•added 2020/04/15 10:12 a.m.•36 views

Updated libssh packages fix security vulnerability

Updated libssh packages fix security vulnerability: A malicious client or server could crash the counterpart implemented with libssh AES-CTR ciphers are used and don't get fully initialized. It will crash when it tries to cleanup the AES-CTR ciphers when closing the connection CVE-2020-1730...

5.3CVSS3.1AI score0.03142EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2020/04/14 5:56 p.m.•12 views

python: Missing salt initialization in _elementtree.c module

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

7.5CVSS6.7AI score0.10911EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2020/04/14 5:56 p.m.•72 views

Moderate: Red Hat Security Advisory: python security update

An update for python is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.1CVSS6.8AI score0.11844EPSS
SaveExploits3References5
IBM Security Bulletins
IBM Security Bulletins
•added 2020/04/13 10:56 p.m.•52 views

Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere (CVE-2019-10209, 10211, 10210, 10208)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to attacks involving PostgreSQL. Vulnerability Details CVEID: CVE-2019-10209 DESCRIPTION: PostgreSQL could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw when user-defined hash...

9.8CVSS1.4AI score0.02188EPSS
SaveExploits0Affected Software1
Veracode
Veracode
•added 2020/04/10 1:00 a.m.•51 views

Information Disclosure

kernel is vulnerable to information disclosure. A missing initialization flaw in the XFS file system implementation could lead to an information leak...

2.1CVSS1.6AI score0.00396EPSS
SaveExploits1References13Affected Software2
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•44 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.2AI score0.00393EPSS
SaveExploits2References33Affected Software1
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•48 views

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists through as missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.4AI score0.00387EPSS
SaveExploits0References20Affected Software1
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•44 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

2.1CVSS1.2AI score0.00868EPSS
SaveExploits3References40Affected Software2
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•38 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.2AI score0.0038EPSS
SaveExploits1References25Affected Software2
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•30 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.2AI score0.0104EPSS
SaveExploits7References15Affected Software2
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•28 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.2AI score0.0038EPSS
SaveExploits1References16Affected Software2
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•53 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

2.1CVSS1.2AI score0.0042EPSS
SaveExploits1References33Affected Software2
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•28 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.2AI score0.0038EPSS
SaveExploits0References16Affected Software2
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•45 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.2AI score0.00387EPSS
SaveExploits1References23Affected Software2
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•41 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.2AI score0.01478EPSS
SaveExploits8References37Affected Software2
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•43 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.2AI score0.00387EPSS
SaveExploits0References42Affected Software2
Rows per page
Query Builder