6417 matches found
QNAP Systems Encryption Bypass
Title: Crypto backdoor in Qnap storage devices Date: 18 September 2009 URL: http://www.baseline-security.de/downloads/BSC-QnapCryptoBackdoor-CVE-2009-3200.txt Vendor: QNAP Systems Products verified: TS-239 Pro, TS-639 Pro Products unverified: SS-439 Pro, TS-439 Pro, TS-439U-SP/RP, TS-509 Pro,...
DSA-1888-1 openssl - cryptographic weakness
Bulletin has no description...
[SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures
------------------------------------------------------------------------ Debian Security Advisory DSA-1888-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 15, 2009 http://www.debian.org/security/faq -...
CVE-2008-7230: Undefined Security Weakness
Unspecified vulnerability in Small Footprint CIM Broker SFCB before 1.2.5 has unknown impact and attack vectors...
CVE-2009-3177: Undefined Security Weakness
Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, 1 "Kaspersky Online Antivirus Scanner 7.0 exploit Linux" and 2 "Kaspersky Online Antivirus Scanner 7.0 exploit Windows." NOTE: a...
CVE-2008-7198: Undefined Security Weakness
Multiple unspecified vulnerabilities in phpns before 2.1.1beta1 have unknown impact and attack vectors...
CVE-2008-7197: Undefined Security Weakness
Multiple unspecified vulnerabilities in G15Daemon before 1.9.4 have unknown impact and attack vectors...
CVE-2009-3091: Undefined Security Weakness
Unspecified vulnerability on the ASUS WL-330gE has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable...
CVE-2008-7164: Undefined Security Weakness
Multiple unspecified vulnerabilities in Shareaza before 2.3.1.0 have unknown impact and attack vectors related to "very important security fixes," possibly involving update notifications and a domain that is no longer controlled by the vendor...
MD2 algorithm used by security certificates is considered weak
Digital signatures made with the MD2 algorithm are used in some of the issuer certificates that Opera trusts. MD2 is now considered weak...
CVE-2008-6973: Undefined Security Weakness
Multiple unspecified vulnerabilities in IBM WebSphere Commerce 6.0 before 6.0.0.7 have unknown impact and attack vectors...
CVE-2009-2722: Undefined Security Weakness
Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594. NOTE: this issue exists because of an incorrect fix for BugId 6406003...
CVE-2009-2716: Undefined Security Weakness
The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "old zip and certificate handling" and have unspecified other impact via unknown vectors...
CVE-2009-2452: Undefined Security Weakness
Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to "underlying components of the License Management Console."...
CVE-2009-2368: Undefined Security Weakness
Unspecified vulnerability in Socks Server 5 before 3.7.8-8 has unknown impact and attack vectors...
CVE-2009-2039: Undefined Security Weakness
Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders...
CVE-2009-2038: Undefined Security Weakness
Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges...
CVE-2009-2030: Undefined Security Weakness
Unspecified vulnerability in the XML Digital Signature verification functionality in JVA-RUN in JDK 6.0 in IBM OS/400 i5/OS V5R4M0 and V6R1M0 has unknown impact and attack vectors related to "XML SECURITY PATCH."...
CVE-2009-2028: Undefined Security Weakness
Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."...
