1727 matches found
CVE-2012-0785
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."...
CVE-2012-0785
Jenkins Hash DoS (CVE-2012-0785): Affected products are Jenkins versions before 1.447, LTS before 1.424.2, and CloudBees Enterprise 1.424.x before 1.424.2.1 or 1.400.x before 1.400.0.11. The vulnerability involves a hash collision that could allow remote attackers to cause substantial CPU load. N...
Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1
Summary Several vulnerabilities have been addressed for: IBM SDK Java Technology Edition Quarterly CPU Oct 2015, including Oracle Oct 2015 CPU; IBM SDK Java Technology Edition Quarterly CPU Jan 2016, including Oracle Jan 2016 CPU; Java specific SLOTH Weak MD5 Signature Hash; and several OpenSSL...
Security Bulletin: Jetty vulnerabilities found in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2011-4461, CVS-2009-4612, CVE-2009-4611, CVE-2009-4610, CVS-2009-4609, CVE-2009-1524, CVE-2009-1523)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway use Jetty version 6.1.8. and thus are affected by the following security vulnerabilities discovered in the Jetty version 6.1.8 Vulnerability Details CVEID: CVE-2011-4461 DESCRIPTION: Mort Bay Jetty 6.1.8 computes hash values for fo...
Dangerous Domain Corp.com Goes Up for Sale
As an early domain name investor, Mike O'Connor had by 1994 snatched up several choice online destinations, including bar.com, cafes.com, grill.com, place.com, pub.com and television.com. Some he sold over the years, but for the past 26 years O'Connor refused to auction perhaps the most sensitive...
DEBIAN-CVE-2014-5278
A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...
Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects Sterling Integrator and Sterling File Gateway (CVE-2015-7575)
Summary The MD5 “SLOTH” vulnerability on TLS 1.2 affects Sterling Integrator and Sterling File Gateway. Vulnerability Details CVEID: CVE-2015-7575 DESCRIPTION: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a...
Exploit Fully Breaks SHA-1, Lowers the Attack Bar
A proof-of-concept attack has been pioneered that “fully and practically” breaks the Secure Hash Algorithm 1 SHA-1 code-signing encryption, used by legacy computers to sign the certificates that authenticate software downloads and prevent man-in-the-middle tampering. The exploit was developed by...
New SHA-1 Attack
There's a new, practical, collision attack against SHA-1: In this paper, we report the first practical implementation of this attack, and its impact on real-world security with a PGP/GnuPG impersonation attack. We managed to significantly reduce the complexity of collisions attack against SHA-1: ...
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
DEBIAN-CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
Code injection
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-3543
Technical details about CVE-2012-3543 are not publicly provided in the supplied documents. Monitor for updates from vendors or vulnerability trackers for affected software, impact, and fixed versions.
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2011-4967
tog-Pegasus has a package hash collision DoS vulnerability...
Design/Logic Flaw
tog-Pegasus has a package hash collision DoS vulnerability...
CVE-2011-4967
CVE-2011-4967, titled tog-Pegasus hash collision DoS vulnerability, affects the tog-Pegasus package (hash collision in its XML table) and is described across multiple sources as a DoS vector with a network attack surface. NVD lists CVSS2/3.1 base scores of 5.0 (Medium) and 7.5 (High) respectively...