Lucene search
+L

183 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 4:09 a.m.•7 views

SUSE CVE-2019-14855

A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18...

5.9CVSS6.3AI score0.01077EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2023/02/15 3:40 a.m.•10 views

SUSE CVE-2021-32739

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a...

8.8CVSS7.1AI score0.0114EPSS
SaveExploits1References4
Ivanti
Ivanti
•added 2023/02/14 7:22 a.m.•29 views

SA40003 - [Pulse Secure] July 9th 2015 OpenSSL Security Advisory (CVE-2015-1793)

Last Modified Date Aug 24, 2026 12:34:55 AM...

6.5CVSS6.7AI score0.58447EPSS
SaveExploits7
The Hacker News
The Hacker News
•added 2023/01/16 10:09 a.m.•13 views

New Backdoor Created Using Leaked CIA's Hive Malware Discovered in the Wild

Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency CIA's Hive multi-platform malware suite, the source code of which was released by WikiLeaks in November 2017. "This is the first time we caught a variant of the CIA Hive...

7.4AI score
SaveExploits0
Prion
Prion
•added 2022/11/27 4:15 a.m.•18 views

Design/Logic Flaw

In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 November 2016...

6.4CVSS8.9AI score0.00451EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2022/07/19 9:07 p.m.•7 views

nodejs: Improper handling of URI Subject Alternative Names

A flaw was found in node.js where it accepted a certificate's Subject Alternative Names SAN entry, as opposed to what is specified by the HTTPS protocol. This flaw allows an active person-in-the-middle to forge a certificate and impersonate a trusted host...

7.4CVSS7.3AI score0.08373EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/04/21 12:00 a.m.•21 views

Slackware: Security Advisory (SSA:2015-190-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.58447EPSS
SaveExploits7References3
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•19 views

Mozilla Firefox Security Advisory (MFSA2014-73) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.5CVSS6.9AI score0.16703EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/10/05 5:00 p.m.•10 views

CVE-2021-35497

The FTL Server tibftlserver and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, TIBCO ActiveSpaces - Enterprise Edition, TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FT...

7.5CVSS7.1AI score0.00421EPSS
SaveExploits0References3Affected Software9
NVD
NVD
•added 2021/09/18 4:15 p.m.•27 views

CVE-2021-41393

Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations...

9.8CVSS0.01067EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/09/18 3:15 p.m.•34 views

CVE-2021-41393

Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations...

9.7AI score0.01067EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/08/17 12:00 a.m.•26 views

OpenSSL: Alternative Chains Certificate Forgery (20150709) - Linux

OpenSSL is prone to certificate forgery. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute...

6.5CVSS6.7AI score0.58447EPSS
SaveExploits7References1
OpenVAS
OpenVAS
•added 2021/08/17 12:00 a.m.•32 views

OpenSSL: Alternative Chains Certificate Forgery (20150709) - Windows

OpenSSL is prone to certificate forgery. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute...

6.5CVSS6.7AI score0.58447EPSS
SaveExploits7References1
Positive Technologies
Positive Technologies
•added 2021/07/15 12:00 a.m.•9 views

PT-2021-6701 · Icinga +1 · Icinga +1

Name of the Vulnerable Software and Affected Versions: Icinga versions 2.4.0 through 2.12.4 Description: The issue concerns a monitoring system that checks network resource availability and generates performance data. It may allow privilege escalation for authenticated API users. With a read-only...

9.8CVSS7AI score0.02915EPSS
SaveExploits5References40
attackerkb
attackerkb
•added 2021/07/09 12:00 a.m.•12 views

CVE-2021-29792

IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the cluster and gain privileges of another user. IBM X-Force ID: 203450...

7.2CVSS6.1AI score0.00472EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•19 views

SUSE: Security Advisory (SUSE-SU-2014:1220-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.16703EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•14 views

SUSE: Security Advisory (SUSE-SU-2014:1220-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.16703EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•31 views

SUSE: Security Advisory (SUSE-SU-2014:1220-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.9AI score0.16703EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•15 views

SUSE: Security Advisory (SUSE-SU-2014:1220-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.16703EPSS
SaveExploits0References2
OSV
OSV
•added 2020/06/08 4:15 p.m.•16 views

CVE-2020-9040

Couchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate and pose as the intended peer. An attacker can leverage this flaw by crafting a cryptographically valid certificate that will be accepted by Java SDK's Netty component due to missing hostname...

7.5CVSS7.1AI score0.00667EPSS
SaveExploits0References1
Rows per page
Query Builder