Lucene search
K

234 matches found

Tenable Nessus
Tenable Nessus
added 2015/12/10 12:0 a.m.64 views

Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression - Configuration Profiles - CoreGraphics - CoreMedi...

10CVSS7AI score0.19628EPSS
Exploits18References58
Into the symmetry
Into the symmetry
added 2015/05/22 8:32 a.m.37 views

So, you wanna crypto (in AEM)

So another year passed by and I will talk again , ... at the Connect WE conference. This year with Damien Antipa we will have a speech entitled So, you wanna crypto in AEM . Now, is true that even symmetric encryption isn't a “solved problem” but hey we still need to protect information et al : N...

6.9AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libgobject-20-0 package in the SUSE Linux Enterprise operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

4.6CVSS7.1AI score0.00494EPSS
Exploits1References3
Prion
Prion
added 2015/02/18 2:59 a.m.11 views

Authorization

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file...

4.4CVSS7.2AI score0.00512EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2015/02/18 2:0 a.m.11 views

CVE-2015-1356

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file...

6.7AI score0.00512EPSS
Exploits0References1
CVE
CVE
added 2015/02/18 2:0 a.m.49 views

CVE-2015-1356

Siemens SIMATIC STEP 7 TIA Portal (pre-13 SP1) stores device user privileges in project files with insufficient integrity protection, enabling modification of authorization data via a manipulated file and leading to privilege escalation. Mitigation: apply Siemens STEP 7 TIA Portal V13 Service Pac...

4.4CVSS6.9AI score0.00512EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2013/11/05 9:55 p.m.2 views

DEBIAN-CVE-2013-4135

The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...

4.3CVSS6.4AI score0.01855EPSS
Exploits0References1
OSV
OSV
added 2013/11/05 9:55 p.m.7 views

CVE-2013-4135

The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...

6.1AI score
Exploits0References3
OpenVAS
OpenVAS
added 2012/08/02 12:0 a.m.38 views

SuSE Update for tomcat6 openSUSE-SU-2012:0208-1 (tomcat6)

Check for the Version of tomcat6 OpenVAS Vulnerability Test $Id: gbsuse201202081.nasl 8265 2018-01-01 06:29:23Z teissa $ SuSE Update for tomcat6 openSUSE-SU-2012:0208-1 tomcat6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This progr...

5CVSS5.1AI score0.0854EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2012/05/21 4:32 p.m.6 views

tomcat: Multiple weaknesses in HTTP DIGEST authentication

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

5CVSS6.1AI score0.0854EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2012/05/21 4:28 p.m.4 views

tomcat: Multiple weaknesses in HTTP DIGEST authentication

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

5CVSS6.1AI score0.0854EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2012/02/22 5:2 a.m.4 views

tomcat: Multiple weaknesses in HTTP DIGEST authentication

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

5CVSS6.1AI score0.0854EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2012/01/31 10:57 p.m.5 views

tomcat: Multiple weaknesses in HTTP DIGEST authentication

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

5CVSS6.1AI score0.0854EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2012/01/31 10:56 p.m.2 views

tomcat: Multiple weaknesses in HTTP DIGEST authentication

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

5CVSS6.1AI score0.0854EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2012/01/14 9:55 p.m.26 views

CVE-2011-5062

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

5CVSS6.3AI score0.07628EPSS
Exploits0References5
Prion
Prion
added 2012/01/14 9:55 p.m.21 views

Authentication flaw

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

5CVSS6.7AI score0.0854EPSS
Exploits0References22Affected Software1
NVD
NVD
added 2012/01/14 9:55 p.m.24 views

CVE-2011-5062

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

5CVSS5.6AI score0.07628EPSS
Exploits0References22
CVE
CVE
added 2012/01/14 9:0 p.m.100 views

CVE-2011-5062

CVE-2011-5062 affects Apache Tomcat’s HTTP Digest Access Authentication. The vulnerability arises because Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 do not check qop values, enabling remote attackers to bypass intended integrity protections via a qop=auth value. This is ...

5CVSS4.6AI score0.07628EPSS
Exploits0References22Affected Software1
Debian CVE
Debian CVE
added 2012/01/14 9:0 p.m.35 views

CVE-2011-5062

Removed by vendor...

5CVSS5AI score0.07628EPSS
Exploits0
OpenVAS
OpenVAS
added 2011/11/07 12:0 a.m.12 views

IT-Grundschutz M4.341: Integritätsschutz unter Windows Vista (Windows)

IT-Grundschutz M4.341: Integritätsschutz unter Windows VistaWin. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94246 Diese Prüfung bezieht sich auf die 12...

0.2AI score
Exploits0References1
Rows per page
Query Builder