Lucene search
+L

905 matches found

OSV
OSV
added 2020/03/20 9:15 p.m.4 views

DEBIAN-CVE-2019-15522

An issue was discovered in LINBIT csync2 through 2.0. csyncdaemonsession in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL...

9.8CVSS6.8AI score0.01854EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/20 9:15 p.m.5 views

UBUNTU-CVE-2019-15522

An issue was discovered in LINBIT csync2 through 2.0. csyncdaemonsession in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL...

9.8CVSS5.8AI score0.01854EPSS
SaveExploits0References3
OSV
OSV
added 2020/03/12 4:15 p.m.9 views

CVE-2020-0884

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'...

3.7CVSS5.8AI score0.01629EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/03/05 1:12 p.m.7 views

undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS

A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS5.8AI score0.02137EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/02/06 8:34 a.m.5 views

undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS

A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS5.8AI score0.02137EPSS
SaveExploits0References4
OSV
OSV
added 2020/01/23 5:15 p.m.4 views

DEBIAN-CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.5AI score0.02137EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/01/21 3:47 a.m.5 views

undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS

A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS5.8AI score0.02137EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/01/21 3:22 a.m.3 views

undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS

A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS5.8AI score0.02137EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/01/21 2:57 a.m.6 views

undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS

A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS5.8AI score0.02137EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/01/21 2:23 a.m.7 views

undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS

A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS5.8AI score0.02137EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/01/10 12:0 a.m.2 views

Huawei CloudEngine 12800, S5700 and S6700 weak algorithm vulnerability

Huawei CloudEngine 12800 and others are products of Huawei, China.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei S5700 is an enterprise switch.Huawei S6700 is an enterprise switch.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei CloudEngine 12800 is a 128...

5.3CVSS6.7AI score0.00452EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/01/07 12:0 a.m.5 views

ence-agents trust management issue vulnerability

fence-agents is an agent program that supports remote power management of clustered devices. A trust management issue vulnerability exists in versions prior to fence-agents 4.0.17, which can be exploited by an attacker to spoof an SSL server with an arbitrary SSL certificate...

5.9CVSS7AI score0.00834EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:0 a.m.7 views

The vulnerability of the reassembly function for SSL package modules in Cisco Firepower System Software allows a intruder to trigger a service failure.

The vulnerability of the package rebuilding function of the Secure Sockets Layer SSL module in Cisco Firepower System Software allows for uncontrolled resource consumption. Exploiting this vulnerability can enable a malicious actor to cause service interruptions remotely...

10CVSS7.6AI score0.02483EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/11/15 3:15 p.m.5 views

UBUNTU-CVE-2013-4584

Perdition before 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server. ssloutgoingciphers not being applied to STARTTLS connections...

5.9CVSS6.3AI score0.01522EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:0 a.m.7 views

The vulnerability of the implementation of the Virtual Private Network (VPN) technology based on Secure Sockets Layer (SSL) and Transport Layer Security (TLS protocols, provided by the Cisco Adaptive Security Appliance – ASA) allows a perpetrator to cause service interruptions.

The vulnerability of the VPN technology based on Secure Sockets Layer SSL and Transport Layer Security TLS implemented by Cisco Adaptive Security Appliance ASA is related to errors in string processing in the Base64 encoding format. Exploiting this vulnerability can allow an attacker to cause a...

7.7CVSS5.5AI score0.01526EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2019/10/16 12:0 a.m.7 views

PT-2019-11840 · Jenkins · Jenkins Cadence Vmanager Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Cadence vManager Plugin versions prior to 2.7.1 Description: The issue concerns the disabling of SSL/TLS and hostname verification globally for the Jenkins master JVM. This affects the security of the Jenkins master JVM, potentially...

8.2CVSS8.1AI score0.00993EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2019/10/11 12:0 a.m.27 views

Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability

A denial of service DoS vulnerability exists in Secure Sockets Layer SSL VPN feature of Cisco Adaptive Security Appliance ASA Software due to incorrect handling of Base64-encoded strings. An unauthenticated, remote attacker can exploit this issue, via opening many SSL VPN sessions to an affected...

7.7CVSS6.9AI score0.01526EPSS
SaveExploits0References4
OSV
OSV
added 2019/10/09 8:15 p.m.7 views

CVE-2019-0051

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the...

7.5CVSS5.8AI score0.01064EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/02 7:15 p.m.5 views

CVE-2019-12677

A vulnerability in the Secure Sockets Layer SSL VPN feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a denial of service DoS condition that prevents the creation of new SSL/Transport Layer Security TLS connections to an affected...

6.5CVSS5.9AI score0.01526EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/10/02 12:0 a.m.8 views

PT-2019-3523 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A vulnerability in the Secure Sockets Layer SSL VPN feature could allow an authenticated, remote attacker to cause a denial of service DoS condition...

7.7CVSS6.7AI score0.01526EPSS
SaveExploits0References5
Rows per page
Query Builder