470 matches found
nettle: Information disclosure
Background Nettle is a cryptographic library that is designed to fit easily in almost any context: In cryptographic toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like lsh or GnuPG, or even in kernel space. Description It was found that nettle’s RSA and DSA...
UBUNTU-CVE-2017-7507
GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application...
USN-3270-1 nss vulnerabilities
Karthik Bhargavan and Gaetan Leurent discovered that the DES and Triple DES ciphers were vulnerable to birthday attacks. A remote attacker could possibly use this flaw to obtain clear text data from long encrypted sessions. This update causes NSS to limit use of the same symmetric key...
UBUNTU-CVE-2017-5462
A flaw in DRBG number generation within the Network Security Services NSS library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerabili...
codeigniter -- multiple vulnerabilities
The CodeIgniter changelog reports: Fixed an XSS vulnerability in Security Library method xssclean. Fixed a possible file inclusion vulnerability in Loader Library method vars. Fixed a possible remote code execution vulnerability in the Email Library when ‘mail’ or ‘sendmail’ are used thanks to Pa...
FreeBSD : codeigniter -- multiple vulnerabilities (496160d3-d3be-11e6-ae1b-002590263bf5)
The CodeIgniter changelog reports : Fixed a number of new vulnerabilities in Security Library method xssclean. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...
UBUNTU-CVE-2016-9631
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...
Low: Red Hat Security Advisory: mod_nss security, bug fix, and enhancement update
An update for modnss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
codeigniter -- multiple vulnerabilities
The CodeIgniter changelog reports: Fixed a number of new vulnerabilities in Security Library method xssclean...
The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The use of this function after release in CERTDestroyCertificate in libnss3.so within the NSS library suite from Mozilla for Firefox, Firefox ESR, and Thunderbird allows malicious remote actors to execute arbitrary code by improperly deleting the NSSCertificate structure from the trusted domain...
The vulnerability of the SeaMonkey software allows a malicious attacker to compromise protected information.
The vulnerability exists in the certTestHostName function in lib/certdb/certdb.c, which is part of the certificate validation mechanism in the Mozilla NSS library. It stems from groups of characters embedded in the U-label for internationalized domain names. Exploiting this vulnerability allows...
BELL-CVE-2015-4599 CVE-2015-4599 does not affect BellSoft software
Bulletin has no description...
[SECURITY] Fedora 24 Update: mod_nss-1.0.12-4.fc24
The modnss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols using the Network Security Services NSS security library...
nss: Heap buffer overflow vulnerability in ASN1 certificate parsing (MFSA 2016-35)
A heap-based buffer overflow flaw was found in the way NSS parsed certain ASN.1 structures. An attacker could use this flaw to create a specially crafted certificate which, when parsed by NSS, could cause it to crash, or execute arbitrary code, using the permissions of the user running an...
Mozilla Network Security Services Buffer Overflow Vulnerability
Mozilla Network Security Services is a library that provides cross-platform support for SSL, S/MIME and other Internet security standards. A buffer overflow vulnerability in the parsing of ASN.1 structures by Mozilla Network Security Services could be exploited by a remote attacker to construct a...
USN-2882-1 curl vulnerability
Isaac Boukris discovered that curl could incorrectly re-use NTLM proxy credentials when subsequently connecting to the same host...
[SECURITY] Fedora 22 Update: mod_nss-1.0.11-6.fc22
The modnss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols using the Network Security Services NSS security library...
CVE-2016-0423
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Enterprise Infrastructure SEC...
