24537 matches found
Linux Distros Unpatched Vulnerability : CVE-2009-3766
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - muttssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name CN field of an X.5...
Linux Distros Unpatched Vulnerability : CVE-2011-4576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might all...
Use Of A Broken Or Risky Cryptographic Algorithm
Easy-RSA is vulnerable to weak encryption algorithm usage. The vulnerability is due to insecure key generation due to the use of a weak default encryption algorithm when creating the private CA key with OpenSSL 3, and attackers can exploit this to more easily brute-force the CA private key and...
Advisory ROSA-SA-2025-2753
Software: openssl 1.1.1k OS: ROSA Virtualization 2.1 packageevrstring: openssl-1.1.1.1k-12.0.1.rv3 CVE-ID: CVE-2020-25659 BDU-ID: 2022-05647 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the python-cryptography package of the Python programming language interpreter is related to RSA key management...
Advisory ROSA-SA-2025-2737
Software: iperf3 3.5 OS: ROSA Virtualization 3.0 packageevrstring: iperf3-3.5-10.rv30 CVE-ID: CVE-2023-7250 BDU-ID: 2024-03238 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the Iperf3 network bandwidth measurement tool is related to allowed input lists. Exploitation of the vulnerability could...
Advisory ROSA-SA-2025-2730
Software: openssl 1.1.1k OS: ROSA Virtualization 3.0 packageevrstring: openssl-1.1.1k-12.0.2.rv30 CVE-ID: CVE-2024-0727 BDU-ID: 2024-01337 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the PKCS12parse, PKCS12unpackp7data, PKCS12unpackp7encdata, PKCS12unpackauthsafes, and PKCS12newpass functions ...
OESA-2025-1193 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing...
Critical Photon OS Security Update - PHSA-2025-5.0-91-0480
Updates of 'iniparser', 'gnutls', 'openssl', 'xerces-c' packages of Photon OS have been released...
Photon OS 5.0: Openssl PHSA-2025-5.0-0480
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0480. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Critical Photon OS Security Update - PHSA-2025-5.0-0480
Updates of 'gnutls', 'iniparser', 'xerces-c', 'openssl' packages of Photon OS have been released...
mysql:8.0 security update
An update is available for module.mecab, mecab-ipadic, module.mysql, module.mecab-ipadic, mysql, mecab. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is ...
RLSA-2025:1673 Important: mysql:8.0 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: openssl: SSLselectnextproto buffer overread CVE-2024-5535 krb5: GSS message token handling CVE-2024-37371 curl: libcurl: ASN.1 date pars...
[SECURITY] Fedora 40 Update: openssl-3.2.4-1.fc40
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...
ROS-20250226-16
SSLVERIFYPEER mode vulnerability in the OpenSSL cryptographic library is related to the lack of a mechanism of to notify the user when a communication session is established. Exploitation of the vulnerability could allow an attacker acting remotely to realize a man-in-the-middle attack during a...
Fedora 40 : openssl (2025-becf280371)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-becf280371 advisory. Rebase to 3.2.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
RockyLinux 8 : mysql:8.0 (RLSA-2025:1673)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:1673 advisory. openssl: SSLselectnextproto buffer overread CVE-2024-5535 krb5: GSS message token handling CVE-2024-37371 curl: libcurl: ASN.1 date parser overread...
Fedora: Security Advisory (FEDORA-2025-becf280371)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-77F3-6546-6RJ7 vulnerabilities
Vulnerabilities for packages: openssl...