182 matches found
The vulnerability of the web interface of the Cisco SPA112 IP phone allows attackers to perform cross-site scripting attacks.
The vulnerability of the web interface for processing Cisco SPA112 IP-telephone certificates exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
The vulnerability of the certificate processing component in Cisco SPA112, SPA525, and SPA5X5 Series IP phones allows a perpetrator to gain access to protected information.
The vulnerability of the certificate processing component in Microprogramming Software for Cisco SPA112, SPA525, and SPA5X5 Series devices is related to errors during certificate verification on the server side. Exploiting this vulnerability can allow an attacker to gain access to protected...
OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)
It was discovered that the Security component of OpenJDK could fail to properly enforce restrictions defined for processing of X.509 certificate chains. A remote attacker could possibly use this flaw to make Java accept certificate using one of the disabled algorithms...
CVE-2017-4981
EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability...
CVE-2017-4981
EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability...
Design/Logic Flaw
EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability...
CVE-2017-4981
EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability...
Amazon Linux AMI : gnutls (ALAS-2017-815)
A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections form other clients. CVE-2016-8610...
The vulnerability of the Firefox browser, which allows a malicious actor to compromise the accessibility of protected information
The vulnerability in Mozilla Firefox allows malicious actors operating remotely to cause a service failure certificate processing failure using a specially crafted certificate. In this case, the UTF-8 character encoding is not used in the relevant context...
The vulnerability of Thunderbird software, which allows a malicious attacker to compromise the accessibility of protected information
The vulnerability in Mozilla Firefox and Thunderbird allows malicious actors, operating remotely, to trigger a service failure certificate processing failure using a specially crafted certificate. In this case, the UTF-8 character encoding is not utilized in the relevant context...
The vulnerability of the Firefox browser, which allows a malicious attacker to compromise the accessibility of protected information
The vulnerability in Mozilla Firefox allows malicious actors operating remotely to cause a service failure certificate processing failure by using a specially crafted certificate that does not utilize ASCII encoding in the appropriate context...
The vulnerability of Thunderbird software, which allows a malicious attacker to compromise the accessibility of protected information
The vulnerability in Mozilla Firefox and Thunderbird allows malicious actors, operating remotely, to trigger a service failure certificate processing failure using a specially crafted certificate. In this case, the ASCII character encoding is not utilized in the relevant context...
The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability exists in the NSS Network Security Services library of Mozilla for Mozilla Firefox, due to incorrect processing of ASN.1 values in X.509 certificates. Exploiting this vulnerability allows malicious actors to replace RSA signatures with specially crafted certificates. This...
The vulnerability of the Firefox browser, which allows a malicious attacker to compromise the accessibility of protected information
The vulnerability in Mozilla Firefox allows malicious actors operating remotely to cause a service failure certificate processing failure by using a specially crafted certificate that does not utilize UTF-8 character encoding in the appropriate context...
The vulnerability of Thunderbird software, which allows a malicious attacker to compromise the accessibility of protected information
The vulnerability in Mozilla Firefox and Thunderbird allows malicious actors, operating remotely, to trigger a service failure certificate processing failure using a specially crafted certificate. In this case, the UTF-8 character encoding is not utilized in the relevant context...
USN-2979-1 linux vulnerabilities
David Matlack discovered that the Kernel-based Virtual Machine KVM implementation in the Linux kernel did not properly restrict variable Memory Type Range Registers MTRR in KVM guests. A privileged user in a guest VM could use this to cause a denial of service system crash in the host, expose...
USN-2976-1 linux-lts-utopic vulnerability
Philip Pettersson discovered that the Linux kernel's ASN.1 DER decoder did not properly process certificate files with tags of indefinite length. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privilege...
kernel: tags with indefinite length can corrupt pointers in asn1_find_indefinite_length()
A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local, unprivileged user could use a specially crafted X.509 certificate DER file to crash the system or, potentially, escalate their privileges on the system...
The vulnerability of the iOS operating system, which allows attackers to carry out “man-in-the-middle” attacks
The vulnerability of the WebKit component of the iOS operating system is related to errors in cryptographic transformations. Exploiting this vulnerability allows a remote attacker to perform “man-in-the-middle” attacks due to errors in SSL certificate processing...
Cisco ASA Certificate Processing Denial of Service (CSCuh19462)
Cisco Adaptive Security Appliance ASA Software versions for symmetric multi-processor SMP platforms contain a vulnerability that could allow an unauthenticated, remote attacker to trigger the device to crash. The vulnerability is due to the SSL/TLS certificate handling code. An attacker could...