Lucene search
+L

251 matches found

OSV
OSV
added 2023/12/20 12:0 a.m.4 views

UBUNTU-CVE-2023-6135

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox 121...

4.3CVSS6.7AI score0.00714EPSS
Exploits0References7
AlpineLinux
AlpineLinux
added 2023/12/19 2:15 p.m.39 views

CVE-2023-6135

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox 121...

4.3CVSS6.4AI score0.00714EPSS
Exploits0
NVD
NVD
added 2023/12/19 2:15 p.m.20 views

CVE-2023-6135

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox 121...

4.3CVSS0.00714EPSS
Exploits0References3
OSV
OSV
added 2023/12/19 2:15 p.m.9 views

CVE-2023-6135

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox 121...

4.3CVSS3.9AI score
Exploits0References3
OSV
OSV
added 2023/12/19 2:15 p.m.3 views

DEBIAN-CVE-2023-6135

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox 121...

4.3CVSS6.3AI score0.00714EPSS
Exploits0References1
Prion
Prion
added 2023/12/19 2:15 p.m.27 views

Code injection

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox 121...

4.3CVSS6.3AI score0.00714EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/19 1:38 p.m.24 views

CVE-2023-6135

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox 121...

6.1AI score0.00714EPSS
Exploits0References3
CVE
CVE
added 2023/12/19 1:38 p.m.201 views

CVE-2023-6135

CVE-2023-6135 corresponds to a Minerva side-channel vulnerability affecting NSS and Firefox, potentially enabling private-key recovery. The primary affected component is NSS NIST curves; Firefox versions before 121 are listed as affected. Public documents indicate remediation through updated NSS ...

4.3CVSS4.3AI score0.00714EPSS
Exploits0References3Affected Software1
Mozilla
Mozilla
added 2023/12/19 12:0 a.m.153 views

Security Vulnerabilities fixed in Firefox 121 — Mozilla

The WebGL DrawElementsInstanced method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. Multiple NSS NIST curves were susceptible to a side-channel attack known as...

8.8CVSS9.1AI score0.20472EPSS
Exploits0References18Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/04 12:0 a.m.5 views

PT-2024-22602 · Gnutls +10 · Gnutls +10

Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: A flaw was found in GnuTLS, known as the Minerva attack, which is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In...

7.5CVSS5.9AI score0.01614EPSS
Exploits2References111
Openbugbounty
Openbugbounty
added 2023/07/05 3:34 p.m.5 views

minerva-psychotherapy.com Cross Site Scripting vulnerability OBB-3479182

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
The Hacker News
The Hacker News
added 2022/03/28 9:14 a.m.35 views

'Purple Fox' Hackers Spotted Using New Variant of FatalRAT in Recent Malware Attacks

The operators of the Purple Fox malware have retooled their malware arsenal with a new variant of a remote access trojan called FatalRAT, while also simultaneously upgrading their evasion mechanisms to bypass security software. "Users' machines are targeted via trojanized software packages...

1.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2022/02/19 5:34 p.m.12 views

minerva.ic.cnr.it Cross Site Scripting vulnerability OBB-2379381

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2021/09/08 9:43 p.m.47 views

minerva.techtalent-lab.org Cross Site Scripting vulnerability OBB-2136203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Exploits0
Openbugbounty
Openbugbounty
added 2020/05/16 6:34 a.m.13 views

minerva-kg.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1162128 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

0.7AI score
Exploits0
Carbon Black Blog
Carbon Black Blog
added 2018/07/11 1:0 p.m.22 views

Partner Perspectives: Containing and Recovering from Incidents with the Help of Minerva Labs and Carbon Black

Lenny Zeltser is a VP of Products at Minerva Labs, as well as an author and instructor at SANS Institute. Despite their efforts to prevent intrusions, enterprises can still face large-scale compromises. When organizations discover numerous endpoints infected with malicious code, how can responder...

0.8AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/01/18 4:31 p.m.8 views

apparthotel-minerva-diana.de XSS vulnerability

Open Bug Bounty ID: OBB-531145 Description| Value ---|--- Affected Website:| apparthotel-minerva-diana.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/12/06 5:32 p.m.11 views

minervaappointments.com XSS vulnerability

Open Bug Bounty ID: OBB-449362 Description| Value ---|--- Affected Website:| minervaappointments.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/09/25 5:47 p.m.15 views

atlas-minerva.web.cern.ch XSS vulnerability

Vulnerable URL: https://atlas-minerva.web.cern.ch/atlas-minerva/index.php?lang=fr"es Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

6.3AI score
Exploits0
CNVD
CNVD
added 2017/06/01 12:0 a.m.3 views

phpBB Minerva Mod SQL Injection Vulnerability

phpBB is a popular forum program. A SQL injection vulnerability exists in phpBB Minerva Mod, which allows remote attackers to inject malicious sql commands via the vulnerable 'c' parameter to corrupt web applications or dbms...

8.4AI score
Exploits0References1
Rows per page
Query Builder