Lucene search
+L

434 matches found

osv_cve
osv_cve
•added 2019/01/11 6:29 p.m.•16 views

CVE-2016-4642

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings...

5.9CVSS5.8AI score0.01344EPSS
SaveExploits0References3
Prion
Prion
•added 2019/01/11 6:29 p.m.•25 views

Authentication flaw

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings...

4.3CVSS6.6AI score0.01344EPSS
SaveExploits0References3Affected Software3
Cvelist
Cvelist
•added 2019/01/11 6:00 p.m.•32 views

CVE-2016-4642

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings...

6.4AI score0.01344EPSS
SaveExploits0References3
CVE
CVE
•added 2019/01/11 6:00 p.m.•87 views

CVE-2016-4642

CVE-2016-4642 affects CFNetwork Proxies in iOS 9.3.3 and later, tvOS 9.2.2, and OS X El Capitan 10.11.6/Security Update 2016-004. The flaw: proxy authentication incorrectly reported HTTP proxies received credentials securely, with an impact described as possible leakage of sensitive user informat...

5.9CVSS6.9AI score0.01344EPSS
SaveExploits0References3Affected Software3
Positive Technologies
Positive Technologies
•added 2019/01/11 12:00 a.m.•4 views

PT-2019-7826

Name of the Vulnerable Software and Affected Versions iOS versions prior to 9.3.3 tvOS versions prior to 9.2.2 OS X El Capitan versions prior to 10.11.6 and Security Update 2016-004 Description The issue concerns proxy authentication, where HTTP proxies incorrectly reported receiving credentials...

5.9CVSS0.01344EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/11 12:00 a.m.•5 views

CVE-2016-4642: Undefined Security Weakness

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings...

5.9CVSS5.8AI score0.01344EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2017/08/01 2:32 p.m.•655 views

Arachni v1.5.1 - Web Application Security Scanner Framework

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by monitoring and learning from the web application's behavior during the scan process and is...

7.9AI score
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2017/07/13 12:00 a.m.•41 views

Virtuozzo 7 : java-1.6.0-openjdk / java-1.6.0-openjdk-demo / etc (VZLSA-2017-0061)

An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives...

9.6CVSS6.4AI score0.05437EPSS
SaveExploits0References7
Microsoft KB
Microsoft KB
•added 2017/06/13 7:00 a.m.•73 views

Description of the security update for Office 2013: June 13, 2017

Description of the security update for Office 2013: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

9.3CVSS8.8AI score0.22127EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2017/06/13 7:00 a.m.•67 views

Description of the security update for Outlook 2013: June 13, 2017

Description of the security update for Outlook 2013: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

9.3CVSS7.5AI score0.24171EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2017/05/09 4:41 p.m.•12 views

OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)

A flaw was found in the way the Networking component of OpenJDK handled HTTP proxy authentication. A Java application could possibly expose HTTPS server authentication credentials via a plain text network connection to an HTTP proxy if proxy asked for authentication...

5.9CVSS7.2AI score0.03937EPSS
SaveExploits0References5
Citrix
Citrix
•added 2017/05/03 12:00 a.m.•21 views

How to disable the prompt "Authentication is required to set the network proxy used for downloading"

After logon to Linux VDA ICA session,you will receive a prompt "Authentication is required to set the network proxy used for downloading" as below, which would annoy users...

7AI score
SaveExploits0
osv_cve
osv_cve
•added 2017/02/20 8:59 a.m.•9 views

CVE-2016-7579

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "CFNetwork Proxies" component, which allows man-in-the-middle attackers to spoof a proxy password authentication requirement and...

5.9CVSS5.8AI score0.01838EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2017/02/20 8:59 a.m.•9 views

CVE-2016-7579

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "CFNetwork Proxies" component, which allows man-in-the-middle attackers to spoof a proxy password authentication requirement and...

5.9CVSS5.6AI score0.01838EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2017/02/07 12:00 a.m.•59 views

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2017-795)

It was discovered that the Hotspot component of OpenJDK did not properly check arguments of the System.arraycopy function in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's memory and completely bypass Java sandbox restrictions. CVE-2016-558...

9.6CVSS6.5AI score0.05437EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2017/01/16 12:00 a.m.•53 views

Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x, SL6.x, SL7.x i386/x86_64 (20170113)

Security Fixes : - It was discovered that the Hotspot component of OpenJDK did not properly check arguments of the System.arraycopy function in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's memory and completely bypass Java sandbox...

9.6CVSS6.5AI score0.05437EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2017/01/13 12:00 a.m.•18 views

OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)

A flaw was found in the way the Networking component of OpenJDK handled HTTP proxy authentication. A Java application could possibly expose HTTPS server authentication credentials via a plain text network connection to an HTTP proxy if proxy asked for authentication...

5.9CVSS7.2AI score0.03937EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2017/01/13 12:00 a.m.•96 views

Important: Red Hat Security Advisory: java-1.6.0-openjdk security update

An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives...

9.6CVSS6.4AI score0.05437EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2017/01/13 12:00 a.m.•70 views

CentOS 5 / 6 / 7 : java-1.6.0-openjdk (CESA-2017:0061)

An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives...

9.6CVSS6.4AI score0.05437EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2017/01/13 12:00 a.m.•41 views

CentOS Update for java CESA-2017:0061 centos7

Check the version of java SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882632";...

9.6CVSS6.6AI score0.05437EPSS
SaveExploits0References2
Rows per page
Query Builder