Lucene search
+L

91557 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:2 a.m.42 views

Security Bulletin: Vulnerability with RSA Export Keys May Affect IBM WebSphere Application Server on Asset and Service Management (CVE-2015-0138)

Summary The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability CVE-2015-0138 may affect some configurations of IBM WebSphere Application Server Full Profile, IBM WebSphere Application Server Liberty Profile, and IBM WebSphere Application Server Hypervisor Edition...

4.3CVSS4.7AI score0.02795EPSS
SaveExploits0Affected Software14
NVD
NVD
added 2022/09/21 2:15 p.m.13 views

CVE-2022-37026

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS...

9.8CVSS0.01221EPSS
SaveExploits0References4
Prion
Prion
added 2022/09/21 2:15 p.m.18 views

Authentication flaw

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS...

7.5CVSS9.3AI score0.01221EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2022/09/21 2:15 p.m.27 views

CVE-2022-37026

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS...

9.8CVSS7.2AI score0.01221EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2022/09/21 12:0 a.m.90 views

CVE-2022-37026

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS...

9.8CVSS9.5AI score0.01221EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/09/21 12:0 a.m.96 views

CVE-2022-37026

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS...

9.8CVSS9.5AI score0.01221EPSS
SaveExploits0
CVE
CVE
added 2022/09/21 12:0 a.m.187 views

CVE-2022-37026

CVE-2022-37026 affects Erlang/OTP prior to: 23.3.4.15, 24.x prior to 24.3.4.2, and 25.x prior to 25.0.2, where a client authentication bypass can occur in certain client-certification scenarios for SSL/TLS/DTLS. The issue is a bypass in client authentication, not a remote code execution by itself...

9.8CVSS9.2AI score0.01221EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/21 12:0 a.m.9 views

CVE-2022-37026

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS...

6.8AI score0.01221EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/09/20 12:0 a.m.11 views

Fedora: Security Advisory for curl (FEDORA-2022-20e0f8d1cd)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

3.7CVSS6.5AI score0.01908EPSS
SaveExploits1References2
Fedora
Fedora
added 2022/09/19 1:21 a.m.39 views

[SECURITY] Fedora 35 Update: curl-7.79.1-6.fc35

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

3.7CVSS6.7AI score0.01908EPSS
SaveExploits1
Veracode
Veracode
added 2022/09/16 9:14 p.m.28 views

Denial Of Service (DoS)

wolfSSL is vulnerable to denial of service. The vulnerability exists when client connects to a wolfSSL server and SSLclear due to improper session handling which allows an attacker to cause an application crash...

7.5CVSS7AI score0.02227EPSS
SaveExploits2References8Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/15 6:51 p.m.51 views

Security Bulletin: Vulnerability in IBM WebSphere Application Server affects WebSphere Process Server and WebSphere Process Server Hypervisor Editions (CVE-2015-0138)

Summary The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects IBM WebSphere Application Server Full Profile and IBM WebSphere Application Server Hypervisor Edition that is used by WebSphere Process Server and WebSphere Process Server Hypervisor Editions...

4.3CVSS4.6AI score0.02795EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/15 6:50 p.m.17 views

Security Bulletin: Vulnerability in RC4 stream cipher affects WebSphere Process Server (WPS) and WPS Hypervisor editions (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” attack for SSL/TLS affects IBM WebSphere Application Server that is used by WebSphere Process Server WPS and WPS Hypervisor editions. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow ...

5CVSS6.6AI score0.73851EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/15 6:50 p.m.63 views

Security Bulletin: Multiple vulnerabilities in the IBM SDK for Java™ Technology Edition April 2015 CPU affect WebSphere Process Server

Summary There are multiple vulnerabilities in IBM SDK for Java™ Technology Edition that is used by WebSphere Process Server. These issues were disclosed as part of the IBM SDK for Java Technology Edition updates in April 2015. Vulnerability Details CVEID: CVE-2015-0488 DESCRIPTION: An unspecified...

5CVSS6.9AI score0.98685EPSS
SaveExploits0Affected Software2
OpenVAS
OpenVAS
added 2022/09/15 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2022:3267-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6AI score0.0074EPSS
SaveExploits0References2
HPE Security Bulletins
HPE Security Bulletins
added 2022/09/15 12:0 a.m.10 views

HPESBHF04366 rev.3 - HPE Integrated Lights-Out 5 (iLO 5), or Integrated Lights-out 4 (iLO 4) Using OpenSSL, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.72 HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.81 HP ConvergedSystem 700 - Varies, based on server...

7.5CVSS6.6AI score0.73188EPSS
SaveExploits2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/14 3:28 p.m.20 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Buinses Automation Workflow and IBM Business Process Manager (CVE-2022-22365)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow and IBM Business Process Manager. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details...

5.9CVSS5.6AI score0.00582EPSS
SaveExploits0Affected Software6
Kitploit
Kitploit
added 2022/09/14 11:30 a.m.60 views

SDomDiscover - A Easy-To-Use Python Tool To Perform DNS Recon

/ // \ / \ \ / / / / / / / / / / / / \ | / / / / / / // / // / / / / / / // / // // / |/ / / / ///// // ///////|/// A easy-to-use python tool to perform dns recon with multiple options Installation: It can be installed in any OS with python3 Manual installation git clone...

7.3AI score
SaveExploits0References1
OSV
OSV
added 2022/09/14 4:25 a.m.2 views

SUSE-SU-2022:3267-1 Security update for libzapojit

This update for libzapojit fixes the following issues: - CVE-2021-39360: Fixed missing guard against invalid SSL certificates bsc1189844...

5.9CVSS6AI score0.0074EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/14 4:24 a.m.5 views

SUSE-SU-2022:3266-1 Security update for libzapojit

This update for libzapojit fixes the following issues: - CVE-2021-39360: Fixed missing guard against invalid SSL certificates bsc1189844...

5.9CVSS6AI score0.0074EPSS
SaveExploits0References3
Rows per page
Query Builder