Lucene search
+L

88 matches found

UbuntuCve
UbuntuCve
•added 2026/10/15 12:00 a.m.•11 views

CVE-2026-97629

Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-determinist...

8.3CVSS6.2AI score0.00175EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/14 3:17 p.m.•13 views

DEBIAN-CVE-2026-97629

Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-determinist...

6.5CVSS6.2AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 2:40 p.m.•9 views

EUVD-2026-101113

Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-determinist...

8.3CVSS6.2AI score0.00175EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 2:40 p.m.•53 views

CVE-2026-97629

The ngx_http_ssl_module in NGINX Plus , NGINX Open Source , and related F5 products (such as NGINX Instance Manager , F5 WAF for NGINX , and NGINX Gateway Fabric ) is vulnerable to a session forgery flaw. When configured with ssl_session_cache shared:name:size without an explicit ssl_session_tick...

8.3CVSS6.2AI score0.00175EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2026/10/14 1:35 p.m.•14 views

K000162606: NGINX ngx_http_ssl_module vulnerability CVE-2026-97629

Security Advisory Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared: : without an explicit sslsessionticketkey file directive to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a...

8.3CVSS6.2AI score0.00175EPSS
SaveExploits0Affected Software9
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-97629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to...

8.3CVSS6.1AI score0.00175EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2013-4506

Malware in sbrugna...

6.6CVSS5.8AI score0.00951EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2015-2132

Malware in sbrugna...

2.1CVSS7.3AI score0.00433EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•31 views

EUVD-2009-4322

Malware in sbrugna...

5.8CVSS6.4AI score0.0105EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2004-0611

Malware in sbrugna...

5.1CVSS6.4AI score0.01317EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2011-4665

Malware in sbrugna...

5CVSS5.8AI score0.00938EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2014-0706

Malware in sbrugna...

6.4CVSS5.8AI score0.01603EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-1999-0007

Malware in sbrugna...

5CVSS6.4AI score0.07637EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2016-0283

Malware in sbrugna...

4.3CVSS6.2AI score0.00835EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2013-0775

Malware in sbrugna...

9.3CVSS8AI score0.03148EPSS
SaveExploits0References12
OpenVAS
OpenVAS
•added 2025/05/26 12:00 a.m.•13 views

Fedora: Security Advisory (FEDORA-2025-66ebd291f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6AI score0.02795EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/05/22 2:30 a.m.•17 views

CVE-2013-4651

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship...

6.6CVSS7.1AI score0.00951EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•47 views

Oracle Linux 6 / 7 : openssl (ELSA-2016-3621)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3621 advisory. - fix CVE-2016-2177 - possible integer overflow - fix CVE-2016-2178 - non-constant time DSA operations - fix CVE-2016-2179 - further DoS issues in...

10CVSS7.2AI score0.99999EPSS
SaveExploits144References10
IBM Security Bulletins
IBM Security Bulletins
•added 2023/02/28 1:48 a.m.•123 views

Security Bulletin: Vulnerability in SSLv3 affects IBM SAN b-type switches and directors (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM SAN b-type switches and directors. Vulnerability Details CVE-ID : CVE-2014-3566 DESCRIPTION : Product could allow a remote attacker to obta...

4.3CVSS6.5AI score0.99999EPSS
SaveExploits7Affected Software7
IBM Security Bulletins
IBM Security Bulletins
•added 2021/10/25 12:12 p.m.•37 views

Security Bulletin: Vulnerability in SSLv3 affects IBM Packaging Utility (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM Packaging Utility Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follo...

4.3CVSS6.5AI score0.99999EPSS
SaveExploits7Affected Software1
Rows per page
Query Builder