USN-4476-1: NSS vulnerability

It was discovered that NSS incorrectly handled some inputs. An attacker could possibly use this issue to expose sensitive information...

GLSA-202008-08 : Mozilla Network Security Service (NSS): Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-08 Mozilla Network Security Service NSS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in NSS. Please review the CVE identifiers referenced below for details. Impact : An attacker may be able to...

Mozilla Network Security Service (NSS): Multiple vulnerabilities

Background The Mozilla Network Security Service NSS is a library implementing security features like SSL v.2/v.3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME and X.509 certificates. Description Multiple vulnerabilities have been discovered in NSS. Please review the CVE identifiers referenced...

The vulnerability of the SSL API component of the Oracle Security Service allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the SSL API component of the Oracle Security Service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information or to modify, add, or delete data...

Mozilla Network Security Service (NSS): Information disclosure

Background The Mozilla Network Security Service NSS is a library implementing security features like SSL v.2/v.3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME and X.509 certificates. Description NSS was found to not always perform constant-time operations when working with DSA key material. Impa...

CVE-2020-14655

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: SSL API. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracl...

CVE-2020-14530

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: None. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successfu...

CVE-2020-14530

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: None. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successfu...

CVE-2020-14655

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: SSL API. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracl...

CVE-2020-14655

CVE-2020-14655 affects Oracle Security Service (SSL API) in Oracle Fusion Middleware. Affects 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Vulnerability allows unauthenticated attackers over HTTPS to access/modify Oracle Security Service data with C:H I:L, per CVSSv3.1 base metrics (Network, high attac...

CVE-2020-14530

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: None. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successfu...

CVE-2020-14530

CVE-2020-14530 affects Oracle Security Service in Oracle Fusion Middleware (11.1.1.9.0). Description: unauthenticated attacker over HTTPS can access data within Oracle Security Service, indicating a confidentiality impact. CVSSv3.1 base score 5.9 (C:H, A:N) with network attack vector and high att...

CVE-2020-14530

Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: None. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successfu...

Microsoft Intelligent Security Association expands to include managed security service providers

We’d planned a splashy party at Microsoft Inspire to announce our newest Microsoft Intelligent Security Association MISA members and introduce them to association members, but given our world today, I am instead picturing you reading this announcement curled up in a chair with a cup of coffee...

Debian: Security Advisory (DLA-2266-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Windows operating system’s Security Service, related to insecure management of privileges, allows a perpetrator to increase their privileges.

The vulnerability of the Windows operating system’s Security Service is related to insecure handling of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system’s Security Service, related to insecure management of privileges, allows a perpetrator to increase their privileges.

The vulnerability of the Windows operating system’s Security Service is related to insecure handling of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Ukrainian Police Arrest Hacker Who Tried Selling Billions of Stolen Records

The Ukrainian police have arrested a hacker who made headlines in January last year by posting a massive database containing some 773 million stolen email addresses and 21 million unique plaintext passwords for sale on various underground hacking forums. In an official statement released on...

The vulnerabilities of the RSA BSAFE Micro Edition Suite, Oracle Security Service, Oracle Database Server, Oracle Communications IP Service Activator, and Enterprise Manager Ops Center software-related to cryptographic key management failures allow attackers to trigger service failures.

The vulnerabilities of the RSA BSAFE Micro Edition Suite, Oracle Security Service, Oracle Database Server, the network software Oracle Communications IP Service Activator, and the virtualization management system Enterprise Manager Ops Center are related to errors in managing cryptographic keys...

GLSA-202003-37 : Mozilla Network Security Service: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-37 Mozilla Network Security Service: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Network Security Service NSS. Please review the CVE identifiers referenced below for details. Impact : A...