OracleVM 3.2 : onpenssl (OVMSA-2014-0008)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability - replace expired GlobalSign Root CA certificate in ca-bundle.crt - fix for CVE-2013-0169 - SSL/TLS CBC timing attack 907589 - fix for CVE-2013-0166 ...

CentOS Update for java CESA-2014:1634 centos7

Check the version of java SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882057";...

nss: Do not allow p-1 as a public DH value (MFSA 2014-12)

It was found that NSS accepted weak Diffie-Hellman Key exchange DHKE parameters. This could possibly lead to weak encryption being used in communication between the client and the server...

Scientific Linux Security Update : openssl on SL5.x i386/x86_64 (20140813)

It was discovered that the OBJobj2txt function could fail to properly NUL-terminate its output. This could possibly cause an application using OpenSSL functions to format fields of X.509 certificates to disclose portions of its memory. CVE-2014-3508 Multiple flaws were discovered in the way OpenS...

CVE-2014-3510

The ssl3sendclientkeyexchange function in s3clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service NULL pointer dereference and client application crash via a crafted handshake message in conjunction with a 1...

PT-2014-1698

Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8 before 0.9.8zb OpenSSL versions 1.0.0 before 1.0.0n OpenSSL versions 1.0.1 before 1.0.1i Description The issue allows remote DTLS servers to cause a denial of service, resulting in a client application crash due to a NUL...

Vulnerability in OpenSSL - OpenSSL DTLS anonymous EC(DH) denial of service

A flaw in handling DTLS anonymous ECDH ciphersuites was found. OpenSSL DTLS clients enabling anonymous ECDH ciphersuites are subject to a denial of service attack. A malicious server can crash the client with a null pointer dereference read by specifying an anonymous ECDH ciphersuite and sending...

CentOS Update for java CESA-2014:0907 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for java-1.7.0-openjdk RHSA-2014:0889-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

botan -- cryptographic vulnerability

MITRE reports: The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a DH group...

Sony CH / DH Cross Site Request Forgery Vulnerability

Sony CH and DH series IP cameras suffer from a cross site request forgery vulnerability. 1.Advisory Information Title: Sony CH, DH Series Vulnerability Date Published: 12/06/2013 Date of last updated: 12/06/2013 2.Vulnerability Description We have been found the next vulnerability in this devices...

PT-2011-4474

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions 7.1.1.63 and earlier Description The issue is related to multiple stack-based buffer overflows in the DH OneSecondTick function. This can be exploited by remote attackers to cause a denial of service crash and possibly...

OpenSSL 1.x < 1.0.0e Multiple Vulnerabilities

Binary data 6022.prm...

DH Softwares SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

DH Softwares Auth Bypass Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

DH-MLM v3.6.0 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ============================================= DH-MLM v3.6.0 Multiple Remote Vulnerabilities ============================================= Name : DH Softwares Affiliate Program Title : DH-MLM v3.6.0 Multiple Remote Vulnerabilities Affected...

DH-MLM v3.6.0 <= (/admin) Authentication Bypass

Exploit for php platform in category web applications =============================================== DH-MLM v3.6.0 Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm KnocKout member...

CVE-2010-0560

CVE-2010-0560 : Intel Desktop Boards BIOS contains a local privilege-escalation flaw allowing a user with administrative rights to execute arbitrary code in System Management Mode (SSM). Affected are DB, DG, DH, DP, and DQ series boards. The vulnerability is caused by an unspecified issue in the ...

[SA19137] nCipher Products Multiple Vulnerabilities

TITLE: nCipher Products Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19137 VERIFY ADVISORY: http://secunia.com/advisories/19137/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: nCipher payShield http://secunia.com/product/2831/ nCipher nShield...

CVE-2005-2643

Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman DH handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit...