Lucene search
+L

3453 matches found

curl security advisories
curl security advisories
•added 2021/05/26 8:00 a.m.•23 views

Schannel cipher selection surprise

libcurl lets applications specify which specific TLS ciphers to use in transfers, using the option called CURLOPTSSLCIPHERLIST. The cipher selection is used for the TLS negotiation when a transfer is done involving any of the TLS based transfer protocols libcurl supports, such as HTTPS, FTPS,...

5.3CVSS6.4AI score0.02979EPSS
SaveExploits1References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/26 12:00 a.m.•5 views

CVE-2018-16499: Inadequate Encryption Strength

In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks. Usage of unapproved SSH encryption protocols or cipher suites also violates the Data Protection TSR Technical Security Requirements...

5.9CVSS5.8AI score0.0031EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/05/26 12:00 a.m.•18 views

Versa VOS 加密问题漏洞

Versa Networks VOS is an operating system from Versa Networks, USA. The highly flexible VOS enables enterprises, organizations and service providers to deploy Versa SASE in branch offices, clouds, campuses and data centers. A security vulnerability exists in Versa VOS that stems from the use of...

5.9CVSS6AI score0.0031EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/05/26 12:00 a.m.•14 views

Haxx libcurl 加密问题漏洞

HAXX Haxx libcurl is a free, open source client-side URL transport library from the Swedish company HAXX. The library supports FTP, FTPS, TFTP, HTTP and more. Haxx libcurl suffers from a cryptographic issue vulnerability that stems from the fact that libcurl allows applications to specify a...

5.3CVSS6.5AI score0.02979EPSS
SaveExploits1References19
OSV
OSV
•added 2021/05/20 8:15 p.m.•15 views

CVE-2020-18220

Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks...

7.5CVSS7.1AI score0.00412EPSS
SaveExploits1References1
Rockylinux
Rockylinux
•added 2021/05/18 6:21 a.m.•29 views

3.6 bug fix and enhancement update

An update is available for apache-commons-io, atinject, jsr-305, maven-shared-utils, plexus-cipher, aopalliance, plexus-classworlds, guava, apache-commons-cli, plexus-containers, plexus-sec-dispatcher, httpcomponents-client, maven-resolver, apache-commons-lang3, plexus-interpolation, sisu,...

1.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/05/14 12:00 a.m.•51 views

FreeBSD : ImageMagick7 -- multiple vulnerabilities (a7c60af1-b3f1-11eb-a5f7-a0f3c100ae18)

CVE reports : Several vulnerabilities have been discovered in ImageMagick : - CVE-2021-20313: A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. - CVE-2021-20312: A flaw was found in ImageMagick in...

7.8CVSS6.6AI score0.07508EPSS
SaveExploits1References14
OSV
OSV
•added 2021/05/11 11:15 p.m.•27 views

CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5CVSS6.2AI score
SaveExploits0References3
OSV
OSV
•added 2021/05/11 11:15 p.m.•6 views

DEBIAN-CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5CVSS6.3AI score0.01748EPSS
SaveExploits0References1
NVD
NVD
•added 2021/05/11 11:15 p.m.•28 views

CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5CVSS0.01748EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/05/11 11:15 p.m.•12 views

CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5CVSS6.7AI score0.01748EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2021/05/11 11:15 p.m.•38 views

CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5CVSS6.7AI score0.01748EPSS
SaveExploits0References5
Prion
Prion
•added 2021/05/11 11:15 p.m.•32 views

Design/Logic Flaw

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

5CVSS6.9AI score0.01748EPSS
SaveExploits0References3Affected Software2
OSV
OSV
•added 2021/05/11 11:15 p.m.•12 views

UBUNTU-CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5CVSS6.7AI score0.01748EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2021/05/11 12:00 a.m.•42 views

CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5AI score0.01748EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2021/05/11 12:00 a.m.•44 views

CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5CVSS6.7AI score0.01748EPSS
SaveExploits0
CVE
CVE
•added 2021/05/11 12:00 a.m.•282 views

CVE-2021-20313

CVE-2021-20313 is a vulnerability in ImageMagick prior to 7.0.11 describing a potential cipher leak when calculating signatures in TransformSignature, with data confidentiality as the highest concern. The connected advisories (Astra Linux, Debian LTS, Cloud Foundry USNs) confirm ImageMagick invol...

7.5CVSS7.2AI score0.01748EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2021/05/11 12:00 a.m.•4 views

CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

8.7CVSS0.01748EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/11 12:00 a.m.•6 views

CVE-2021-20313: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5CVSS5.5AI score0.01748EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2021/05/11 12:00 a.m.•70 views

CVE-2021-20313

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

7.5CVSS7.4AI score0.01748EPSS
SaveExploits0
Rows per page
Query Builder