Lucene search
+L

6796 matches found

OpenVAS
OpenVAS
•added 2020/07/23 12:00 a.m.•58 views

Debian: Security Advisory (DSA-4732-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS7.5AI score0.05706EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/07/22 12:43 p.m.•12 views

OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to...

4.3CVSS5.9AI score0.0338EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/07/22 12:40 p.m.•12 views

OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to...

4.3CVSS5.9AI score0.0338EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/07/22 12:35 p.m.•10 views

OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to...

4.3CVSS5.9AI score0.0338EPSS
SaveExploits0References4
NVD
NVD
•added 2020/07/20 5:15 p.m.•23 views

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

7.5CVSS8AI score0.02185EPSS
SaveExploits1References1
OSV
OSV
•added 2020/07/20 5:15 p.m.•13 views

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

7.5CVSS7.2AI score0.02185EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2020/07/20 5:15 p.m.•8 views

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

7.5CVSS7.8AI score0.02185EPSS
SaveExploits1References2
Prion
Prion
•added 2020/07/20 5:15 p.m.•20 views

Sql injection

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

5CVSS8AI score0.02185EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/07/20 4:37 p.m.•34 views

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

8AI score0.02185EPSS
SaveExploits1References1
CVE
CVE
•added 2020/07/20 4:37 p.m.•62 views

CVE-2020-15052

CVE-2020-15052 affects Artica Proxy CE before 4.28.030.418. The vulnerability is a SQL injection via the Netmask, Hostname, and Alias fields, stemming from insufficient validation of externally entered SQL statements in the database-backed Artica Proxy Community Edition. Connected CNVD-2020-41859...

7.5CVSS8AI score0.02185EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/20 12:00 a.m.•4 views

CVE-2020-15052: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

7.5CVSS5.8AI score0.02185EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/07/20 12:00 a.m.•251 views

Oracle Linux 7 : java-11-openjdk (ELSA-2020-2969)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2969 advisory. 1:11.0.8.10-0.0.1 - link atomic for ix86 build 1:11.0.8.10-0 - Update to shenandoah-jdk-11.0.8+10 GA - Switch to GA mode for final release. - Update...

8.3CVSS6.5AI score0.05166EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2020/07/16 9:40 a.m.•10 views

OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to...

4.3CVSS5.9AI score0.0338EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/07/13 10:51 a.m.•24 views

nodejs: TLS session reuse can lead to hostname verification bypass

A TLS Hostname verification bypass vulnerability exists in NodeJS. This flaw allows an attacker to bypass TLS Hostname verification when a TLS client reuses HTTPS sessions...

7.4CVSS7.4AI score0.06065EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2020/07/07 5:48 p.m.•19 views

nodejs: TLS session reuse can lead to hostname verification bypass

A TLS Hostname verification bypass vulnerability exists in NodeJS. This flaw allows an attacker to bypass TLS Hostname verification when a TLS client reuses HTTPS sessions...

7.4CVSS7.4AI score0.06065EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2020/07/07 9:14 a.m.•48 views

nodejs: TLS session reuse can lead to hostname verification bypass

A TLS Hostname verification bypass vulnerability exists in NodeJS. This flaw allows an attacker to bypass TLS Hostname verification when a TLS client reuses HTTPS sessions...

7.4CVSS7.4AI score0.06065EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2020/07/07 12:00 a.m.•52 views

Ubuntu 16.04 LTS / 18.04 LTS : GNU C Library vulnerabilities (USN-4416-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4416-1 advisory. Florian Weimer discovered that the GNU C Library incorrectly handled certain memory operations. A remote attacker could use this issue to cau...

9.8CVSS7.7AI score0.07051EPSS
SaveExploits6References12
Hacker One
Hacker One
•added 2020/07/06 8:58 p.m.•131 views

GitHub Security Lab: [Java] CWE-295 - Incorrect Hostname Verification - MitM

This bug was reported directly to GitHub Security Lab...

0.8AI score
SaveExploits0
OSV
OSV
•added 2020/07/06 6:10 p.m.•13 views

USN-4416-1 glibc vulnerabilities

Florian Weimer discovered that the GNU C Library incorrectly handled certain memory operations. A remote attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2017-121...

9.8CVSS7AI score0.07051EPSS
SaveExploits6References12
Ubuntu
Ubuntu
•added 2020/07/06 6:10 p.m.•117 views

USN-4416-1: GNU C Library vulnerabilities

Florian Weimer discovered that the GNU C Library incorrectly handled certain memory operations. A remote attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2017-121...

9.8CVSS7.6AI score0.07051EPSS
SaveExploits6
Rows per page
Query Builder