Lucene search
+L

5654 matches found

Tenable Nessus
Tenable Nessus
added 2016/01/22 12:00 a.m.47 views

Oracle Linux 5 / 7 : java-1.7.0-openjdk (ELSA-2016-0054)

The remote Oracle Linux 5 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0054 advisory. 1.7.0.95-2.6.4.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.95-2.6.4.0 - Bump to 2.6.4 and u95b00. - Backport tarball creation script from OpenJDK...

10CVSS7.5AI score0.14714EPSS
SaveExploits0References8
The Hacker News
The Hacker News
added 2016/01/21 9:28 p.m.16 views

Google to Speed Up Chrome for Fast Internet Browsing

Google is planning to make Chrome faster in order to provide its users fast Internet browsing experience. Thanks to a new, open-source data and web compression algorithm for the Internet called Brotli, which Google announced last year to boost its web page performance. With Brotli, Google will...

6.7AI score
SaveExploits0
Cent OS
Cent OS
added 2016/01/21 5:19 p.m.101 views

java security update

CentOS Errata and Security Advisory CESA-2016:0049 Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS ba...

10CVSS6.8AI score0.14714EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2016/01/21 11:54 a.m.85 views

Important: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

10CVSS6.7AI score0.14714EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2016/01/21 11:38 a.m.56 views

Critical: Red Hat Security Advisory: java-1.8.0-oracle security update

Updated java-1.8.0-oracle packages that fix several security issues are now available for Oracle Java for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

10CVSS6.5AI score0.14714EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2016/01/21 11:38 a.m.59 views

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Oracle Java for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

10CVSS6.5AI score0.14714EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2016/01/21 12:00 a.m.312 views

Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20160120) (SLOTH)

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code. An untrusted Java application or applet could use this flaw to bypass Java sandbox...

10CVSS8.1AI score0.14714EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2016/01/21 12:00 a.m.43 views

RedHat Update for java-1.8.0-openjdk RHSA-2016:0050-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.14714EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2016/01/20 7:30 p.m.13 views

TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...

5.9CVSS7.1AI score0.034EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2016/01/20 7:14 p.m.54 views

Important: Red Hat Security Advisory: java-1.8.0-openjdk security update

Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

10CVSS6.8AI score0.14714EPSS
SaveExploits0References8
CERT
CERT
added 2016/01/12 12:00 a.m.62 views

Samsung SRN-1670D camera contains multiple vulnerabilities

Overview The Samsung SRN-1670D camera contains multiple vulnerabilities. Description CWE-264: Permissions, Privileges, and Access Controls - CVE-2015-8279 An undocumented PHP request may be used to read arbitrary files from the system. CWE-200: Information Exposure - CVE-2015-8280 The interface...

8.6CVSS8AI score0.4786EPSS
SaveExploits5References1
Microsoft KB
Microsoft KB
added 2016/01/12 12:00 a.m.109 views

Microsoft security advisory: Deprecation of SHA-1 hashing algorithm for Microsoft root certificate program: January 12, 2016

None None...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/01/12 12:00 a.m.2009 views

MS KB3123479: Deprecation of SHA-1 Hashing Algorithm for Microsoft Root Certificate Program

The remote Windows host is missing Microsoft KB3123479, an update that restricts the use of certificates with SHA1 hashes, this restriction being limited to certificates issued under roots in the Microsoft root certificate program. This update increases the difficulty of carrying out some spoofin...

5.5AI score
SaveExploits0References4
ThreatPost
ThreatPost
added 2016/01/11 4:48 p.m.13 views

Juniper Removes Dual_EC, ANSI X9.31 Algorithms

Juniper Networks announced late Friday it was removing the suspicious DualECDRBG random number generator from its ScreenOS operating system. And while that’s heralded as a positive move considering DualEC’s dubious origins, there remain important and unanswered questions about Juniper’s decision ...

7.7AI score
SaveExploits0References6
Atlassian
Atlassian
added 2016/01/07 11:30 a.m.21 views

Stronger algorithm used to digest instance admin password

Let's use PKCS5S2...

2.3AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2016/01/07 11:29 a.m.26 views

Stronger algorithm used to digest instance admin password

Let's use PKCS5S2...

2.3AI score
SaveExploits0
Atlassian
Atlassian
added 2016/01/07 11:29 a.m.27 views

Stronger algorithm used to digest instance admin password

Let's use PKCS5S2...

2.3AI score
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2015/12/18 12:00 a.m.54 views

OpenSSL 'PSS' parameter Denial of Service Vulnerability - Windows

OpenSSL is prone to a Denial of Service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

7.5CVSS7.8AI score0.44016EPSS
SaveExploits1References2
ThreatPost
ThreatPost
added 2015/12/15 8:43 a.m.44 views

13 Million MacKeeper Records Found in Public Database

A trove of MacKeeper user data—some 13 million records—has been locked down after a researcher found an exposed and accessible database using a simple Shodan query. Chris Vickery revealed his discovery on Monday on Reddit in more of an appeal to reach officials at Kromtech, the parent company tha...

7.7AI score
SaveExploits0References3
Amazon
Amazon
added 2015/12/14 12:00 a.m.79 views

Medium: openssl

Issue Overview: A NULL pointer derefernce flaw was found in the way OpenSSL verified signatures using the RSA PSS algorithm. A remote attacked could possibly use this flaw to crash a TLS/SSL client using OpenSSL, or a TLS/SSL server using OpenSSL if it enabled client authentication. CVE-2015-3194...

7.5CVSS7.8AI score0.44016EPSS
SaveExploits1
Rows per page
Query Builder