Lucene search
+L

481 matches found

Tenable Nessus
Tenable Nessus
added 2021/05/13 12:00 a.m.38 views

Cisco Adaptive Security Appliance Software Bleichenbacher Attack (cisco-sa-asaftd-tls-bb-2g9uWkP)

According to its self-reported version, the TLS handler of Cisco Adaptive Security Appliance ASA Software for Cisco Firepower 1000 is affected by the Bleichenbacher attack vulnerability due to improper implementation of countermeasures against the Bleichenbacher attack for cipher suites that rely...

5.3CVSS6.3AI score0.01254EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2019:2397-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS6.7AI score0.03838EPSS
SaveExploits0References5
OSV
OSV
added 2021/01/20 4:15 p.m.9 views

CVE-2020-20949

Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube UM1924. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the...

5.9CVSS6.2AI score0.00926EPSS
SaveExploits0References5
Prion
Prion
added 2021/01/20 4:15 p.m.22 views

Information disclosure

Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube UM1924. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the...

4.3CVSS5.6AI score0.00926EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2021/01/20 12:00 a.m.13 views

PT-2021-10560

Name of the Vulnerable Software and Affected Versions: STM32 cryptographic firmware library software expansion for STM32Cube UM1924 affected versions not specified Description: The issue concerns Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA, which can be exploited using Bleichenbacher's...

5.9CVSS6.3AI score0.00926EPSS
SaveExploits0References11
OSV
OSV
added 2021/01/19 1:15 p.m.10 views

CVE-2020-20950

Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable...

5.9CVSS5.5AI score0.00866EPSS
SaveExploits0References4
Prion
Prion
added 2021/01/19 1:15 p.m.15 views

Information disclosure

Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable...

4.3CVSS5.6AI score0.00866EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2020/12/06 9:25 a.m.9 views

OPENSUSE-SU-2020:2173-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2020-25659: Attempted to mitigate Bleichenbacher attacks on RSA decryption bsc1178168. This update was imported from the SUSE:SLE-15-SP2:Update update project...

5.9CVSS6.1AI score0.02454EPSS
SaveExploits0References3
OSV
OSV
added 2020/12/02 9:31 a.m.8 views

SUSE-SU-2020:3592-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2020-25659: Attempted to mitigate Bleichenbacher attacks on RSA decryption bsc1178168...

5.9CVSS7.3AI score0.02454EPSS
SaveExploits0References3
OSV
OSV
added 2020/10/21 7:15 p.m.8 views

CVE-2020-3585

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

3.7CVSS6.5AI score0.01254EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/21 7:15 p.m.28 views

CVE-2020-3585

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

5.3CVSS0.01254EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/21 7:15 p.m.23 views

Input validation

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

4.3CVSS4.5AI score0.01254EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/10/21 6:37 p.m.36 views

CVE-2020-3585 Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

5.3CVSS4.5AI score0.01254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/10/21 6:37 p.m.10 views

CVE-2020-3585 Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

5.3CVSS7AI score0.01254EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/10/21 12:00 a.m.39 views

EulerOS Virtualization 3.0.2.2 : nss (EulerOS-SA-2020-2205)

According to the version of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a...

5.9CVSS6.6AI score0.44398EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/09/29 12:00 a.m.21 views

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2020-2100)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.1AI score0.44398EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/28 12:00 a.m.33 views

EulerOS 2.0 SP3 : nss (EulerOS-SA-2020-2100)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the...

7.5CVSS7.6AI score0.44398EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2020/07/03 12:00 a.m.24 views

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2020-1718)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.4AI score0.44398EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:00 a.m.33 views

EulerOS Virtualization 3.0.6.0 : nss (EulerOS-SA-2020-1718)

According to the version of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a...

5.9CVSS6.6AI score0.44398EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/05/26 12:00 a.m.45 views

Huawei Data Communication: Weak Algorithm Vulnerability in Some Huawei Products (huawei-sa-20180704-01-algorithm)

There is a weak algorithm vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

4.3CVSS0.2AI score0.01087EPSS
SaveExploits0References1
Rows per page
Query Builder