EM-HTTP-Request Trust Management Issues Vulnerability

EM-HTTP-Request is an asynchronous HTTP client from Ilya Grigorik Software Developers of the United States , which supports automatic gzip and deflate decoding , streaming response processing , streaming file uploads and authentication . A trust management issue vulnerability exists in...

CVE-2020-1118

A denial of service vulnerability exists in the Windows implementation of Transport Layer Security TLS when it improperly handles certain key exchanges, aka 'Microsoft Windows Transport Layer Security Denial of Service Vulnerability'...

OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to...

The vulnerability of the implementations of Secure Sockets Layer and Transport Layer Security protocols in the microsoftware for Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the Secure Sockets Layer and Transport Layer Security implementations in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software lies in an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to caus...

The vulnerability of the implementation library for the Transport Layer Security protocol of Cisco Firepower Threat Defense micro-programming software allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Transport Layer Security protocol implementation library in Cisco Firepower Threat Defense software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability (cisco-sa-ssl-bypass-O5tGum2n)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a remote code execution vulnerability in Transport Layer Security. This is due to logic error withing SNORT handling. An unauthenticated, remote attacker can exploit this to bypass web traffic policies...

The vulnerability of the Secure Sockets Layer and Transport Layer Security implementations in Cisco Firepower Threat Defense’s microprogramming-based network interface controllers allows attackers to induce service failures.

The vulnerability of the Secure Sockets Layer and Transport Layer Security implementations of Cisco Firepower Threat Defense’s microprogramming-based network interface controllers is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability could allow...

Microsoft Windows and Windows Server Denial of Service Vulnerability (CNVD-2020-33424)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A denial of service vulnerability exists in the implementation of the Transport Layer...

keycloak: improper verification of certificate with host mismatch could result in information disclosure

A flaw was found in Keycloak, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle MITM attack...

Microsoft Windows Transport Layer Security Denial of Service Vulnerability

A denial of service vulnerability exists in the Windows implementation of Transport Layer Security TLS when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, a remote...

CVE-2020-8156

A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack...

KLA11773 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

PT-2020-19991 · Nextcloud · Nextcloud Mail

Name of the Vulnerable Software and Affected Versions: Nextcloud Mail version 1.1.3 Description: A missing verification of the TLS host allowed a man-in-the-middle attack. Recommendations: For Nextcloud Mail version 1.1.3, update to a version that includes the fix for the missing TLS host...

PT-2020-2352

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A denial of service issue exists in the Windows implementation of Transport Layer Security TLS due to improper handling of certain key exchanges. This can be exploited by a remote attacker to...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed several vulnerabilities in the basic components of Microsoft Windows. A malicious party could potentially exploit them to launch a denial-of-service attack, execute arbitrary code, gain elevated privileges or obtain sensitive data. The main vulnerabilities concern the Windows...

Cisco Firepower Threat Defense Input Validation Error Vulnerability (CNVD-2020-35682)

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from the U.S. company Cisco Cisco. A security vulnerability exists in the TLS version 1.3 policy configured with a URL category in Cisco FTD Software versions 6.4.0 through 6.4.0.8...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Denial of Service Vulnerability (CNVD-2020-31104)

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

The vulnerability of the HelloRetryRequest extension in the Firefox browser allows a perpetrator to compromise data integrity.

The vulnerability of the HelloRetryRequest extension in the Firefox browser is related to an error in packet sending. In this error, the client may negotiate a protocol that is lower in level than TLS 1.3. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

CVE-2020-3285

A vulnerability in the Transport Layer Security version 1.3 TLS 1.3 policy with URL category functionality for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured TLS 1.3 policy to block traffic for a specific URL. The vulnerability i...

CVE-2020-3283

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS handler of Cisco Firepower Threat Defense FTD Software when running on the Cisco Firepower 1000 Series platform could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected...