Lucene search
+L

76 matches found

NVD
NVD
•added 2025/04/28 10:15 a.m.•29 views

CVE-2025-3200

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

9.1CVSS0.00356EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/28 9:37 a.m.•139 views

CVE-2025-3200

CVE-2025-3200 affects the Com-Server component, where an unauthenticated remote attacker could exploit the use of insecure TLS 1.0 and TLS 1.1 to intercept and manipulate encrypted communications between the Com-Server and connected systems. The issue stems from weak cryptographic protocol suppor...

9.1CVSS7.1AI score0.00356EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/28 12:00 a.m.•20 views

PT-2025-18058

Name of the Vulnerable Software and Affected Versions Com-Server affected versions not specified Description An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected...

9.1CVSS6.2AI score0.00356EPSS
SaveExploits0References16
Gentoo Linux
Gentoo Linux
•added 2024/11/17 12:00 a.m.•15 views

GnuTLS: Multiple Vulnerabilities

Background GnuTLS is a secure communications library implementing the SSL, TLS, and DTLS protocols Description Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

7.5CVSS10AI score0.01988EPSS
SaveExploits3
RedHat Linux
RedHat Linux
•added 2024/10/09 11:26 a.m.•288 views

Low: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7AI score0.05582EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•50 views

RHEL 8 : openssl (RHSA-2024:7846)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:7846 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

9.1CVSS7.6AI score0.05582EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/02 12:00 a.m.•1 views

CVE-2023-41928: Use of a Broken or Risky Cryptographic Algorithm

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses...

5.3CVSS5.8AI score0.00133EPSS
SaveExploits0References1
AlmaLinux
AlmaLinux
•added 2024/04/30 12:00 a.m.•108 views

Low: openssl and openssl-fips-provider security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entri...

6.5CVSS6.7AI score0.06531EPSS
SaveExploits0References16
OSV
OSV
•added 2024/03/27 8:15 a.m.•19 views

AZL-37077 CVE-2024-2466 affecting package curl for versions less than 8.8.0-1

libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate...

6.5CVSS7.2AI score0.01333EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/27 8:15 a.m.•7 views

ALPINE-CVE-2024-2466

libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate...

6.5CVSS6.9AI score0.01333EPSS
SaveExploits1References1
OSV
OSV
•added 2024/03/27 7:58 a.m.•40 views

CVE-2024-2466 TLS certificate check bypass with mbedTLS

libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate...

6.5CVSS6.8AI score0.01333EPSS
SaveExploits1References14
RedHat Linux
RedHat Linux
•added 2024/01/22 1:20 a.m.•56 views

Moderate: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS6.7AI score0.03332EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2024/01/11 2:41 a.m.•11 views

SUSE CVE-2023-6129

Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker can influence whether the POLY1305 MAC...

6.5CVSS8.5AI score0.02323EPSS
SaveExploits0References6
OSV
OSV
•added 2023/12/01 11:06 a.m.•12 views

OESA-2023-1867 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

5.9CVSS6.7AI score0.01267EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/08/15 6:25 p.m.•23 views

CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols...

7.2AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/28 1:07 p.m.•53 views

RLSA-2023:1405 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: X.400 address type confusion in X.509 GeneralName CVE-2023-0286 openssl: timing attack in RSA...

7.5CVSS7.3AI score0.59501EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/03/24 12:00 a.m.•13 views

CVE-2023-22812 SanDisk PrivateAccess Deprecated TLS protocol versions supported

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data...

7.4CVSS7.3AI score0.0031EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2023/03/23 12:00 a.m.•31 views

CentOS: Security Advisory for openssl (CESA-2023:1335)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS8.2AI score0.59501EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/03/02 12:00 a.m.•20 views

Fedora: Security Advisory for guile-gnutls (FEDORA-2023-1c4a6a47ae)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.4CVSS8AI score0.01415EPSS
SaveExploits1References2
Rockylinux
Rockylinux
•added 2023/01/26 9:50 p.m.•73 views

openssl security and bug fix update

An update for openssl is now available for Rocky Linux 9. Rocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

10CVSS1AI score0.95404EPSS
SaveExploits1
Rows per page
Query Builder