Lucene search
K

12 matches found

OSV
OSV
added 2026/02/11 9:16 p.m.4 views

AZL-77649 CVE-2026-26014 affecting package telegraf 1.31.0-12

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...

5.9CVSS5.8AI score0.00059EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-1397

Malware in sbrugna...

5.9CVSS5.8AI score0.00839EPSS
Exploits0References4
OSV
OSV
added 2017/02/08 4:59 p.m.1 views

CVE-2016-10213

A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging a reused nonce in a session and a "forbidden attack," a similar issue to CVE-2016-0270...

5.9CVSS5.8AI score0.00539EPSS
Exploits0References3
OSV
OSV
added 2017/02/08 4:59 p.m.1 views

CVE-2017-5933

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...

5.9CVSS5.8AI score
Exploits0References3
OSV
OSV
added 2017/02/08 4:59 p.m.0 views

CVE-2016-10212

Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-0270. NOTE: this issue may be due to the use of a third-party Cavium product...

5.9CVSS5.8AI score
Exploits0References3
Prion
Prion
added 2017/02/08 4:59 p.m.15 views

Authentication flaw

Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-0270. NOTE: this issue may be due to the use of a third-party Cavium product...

4.3CVSS6AI score0.00839EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2017/02/08 4:59 p.m.16 views

CVE-2016-10213

A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging a reused nonce in a session and a "forbidden attack," a similar issue to CVE-2016-0270...

5.9CVSS5.8AI score0.00455EPSS
Exploits0References3
Prion
Prion
added 2017/02/08 4:59 p.m.22 views

Session fixation

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...

4.3CVSS5.8AI score0.00935EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2017/02/08 4:59 p.m.22 views

CVE-2016-10212

Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-0270. NOTE: this issue may be due to the use of a third-party Cavium product...

5.9CVSS5.8AI score0.00839EPSS
Exploits0References3
Prion
Prion
added 2017/02/08 4:59 p.m.18 views

Authentication flaw

A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging a reused nonce in a session and a "forbidden attack," a similar issue to CVE-2016-0270...

4.3CVSS6AI score0.00539EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2017/02/08 4:0 p.m.15 views

CVE-2016-10212

Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-0270. NOTE: this issue may be due to the use of a third-party Cavium product...

5.8AI score0.00839EPSS
Exploits0References3
myhack58
myhack58
added 2016/05/31 12:0 a.m.14 views

Forbidden attack: 7 million web servers get caught by the attack of the risk-vulnerability warning-the black bar safety net

! Recently, according to some international safety panel research showed that financial giants Visa's part of the HTTPS protected site has recently been discovered a vulnerability, which can allow a hacker to inject malicious code, the visitor's browser will access to malicious content. Encryptio...

7.3AI score
Exploits0
Rows per page
Query Builder