Lucene search
+L

5 matches found

OSV
OSV
added 2022/05/24 3:15 p.m.3 views

DEBIAN-CVE-2022-29242

GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL. TLS clients using GOST engine when ciphersuite TLSGOSTR341112256WITHKUZNYECHIKCTROMAC is agreed and the server uses 512 bit GOST secret keys are vulnerable to buffer overflow. GOST engine version 3.0.1...

7.5CVSS7.7AI score0.01597EPSS
SaveExploits0References1
OSV
OSV
added 2022/05/24 3:15 p.m.9 views

UBUNTU-CVE-2022-29242

GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL. TLS clients using GOST engine when ciphersuite TLSGOSTR341112256WITHKUZNYECHIKCTROMAC is agreed and the server uses 512 bit GOST secret keys are vulnerable to buffer overflow. GOST engine version 3.0.1...

7.5CVSS7.5AI score0.01597EPSS
SaveExploits0References7
HPE Security Bulletins
HPE Security Bulletins
added 2021/10/20 12:0 a.m.9 views

HPESBNW04204 rev.1 - HPE 6120XG Switches, Remote Unauthenticated Disclosure of Information

Potential Security Impact: Remote: Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 6120XG Blade Switch firmware Z.14.58 or earlier HPE ProCurve 6120XG Blade Switch for Integrity Servers firmware Z.14.58 or earlier CVSS Scores: | CVE |...

4CVSS6.6AI score0.15395EPSS
SaveExploits1
Symantec
Symantec
added 2018/05/16 8:0 a.m.47 views

SA160: Return of the Bleichenbacher Oracle Threat (ROBOT)

SUMMARY Symantec Network Protection products using affected SSL/TLS server implementations and RSA key exchange are susceptible to a variation of the Bleichenbacher adaptive chosen ciphertext attack. A remote attacker, who has captured a pre-recorded encrypted SSL session to the target, can...

4.3CVSS0.5AI score0.01905EPSS
SaveExploits0Affected Software2
Hacker One
Hacker One
added 2017/01/18 6:23 p.m.224 views

Nextcloud: Nextcloud.com is vulnerable to SWEET32 attack

Researchers have found new attack against 3DES-CBC cipher in TLS,that they can decrypt customer data using a method called SWEET32 Birthday Attack. This Vulnerability has got CVE-2016-2183 and has cvss score 5.0 This vulnerability can be found manually by simply using nmap script nmap -Pn -p...

5CVSS6.8AI score0.95707EPSS
SaveExploits7
Rows per page
Query Builder