Lucene search
K

17043 matches found

Snyk
Snyk
added 2025/10/15 5:39 p.m.3 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS6.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.3 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS6.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.2 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS8.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.2 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS6.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.3 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS8.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.4 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS8.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.3 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS6.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.2 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS8.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.3 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS6.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.2 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS6.6AI score0.00681EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.5 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS8.6AI score0.00681EPSS
Exploits0References2
OSV
OSV
added 2025/10/15 5:39 p.m.3 views

GHSA-GWQ6-FMVP-QP68 Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability

Microsoft Security Advisory CVE-2025-55248 | .NET Information Disclosure Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers can do to update...

5.7CVSS6.3AI score0.00681EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/10/15 4:43 p.m.5 views

CVE-2025-11498

An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager SDM of B Automation Runtime versions before 6.4 enabling a remote attacker to inject formula data into a generated CSV file. The exploitation of this vulnerability requires the attacker...

6.1CVSS6.8AI score0.00288EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/10/15 4:34 p.m.13 views

Important: Red Hat Security Advisory: .NET 9.0 security update

An update for .NET 9.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

9.9CVSS7.5AI score0.66258EPSS
Exploits5References4
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/15 4:29 p.m.11 views

Security Bulletin: IBM Java Updates to Address Latest Vulnerabilities

Summary This update addresses recent vulnerabilities found in the Java Runtime Environment JRE. It addresses the following CVEs: CVE-2025-50106, CVE-2025-30749, CVE-2025-30761, and CVE-2025-30754. Vulnerability Details CVEID:CVE-2025-50106 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle...

8.1CVSS6.3AI score0.01058EPSS
Exploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.5 views

RHEL 8 : .NET 8.0 (RHSA-2025:18148)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:18148 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

9.9CVSS8.8AI score0.66258EPSS
Exploits5References8
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.3 views

Amazon Linux 2023 : cuda-runtime-12 (ALAS2023NVIDIA-2025-212)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-212 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

5.7CVSS5.4AI score0.00141EPSS
Exploits0References4
AlmaLinux
AlmaLinux
added 2025/10/15 12:0 a.m.7 views

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime...

9.9CVSS6.4AI score0.66258EPSS
Exploits5References8
OSV
OSV
added 2025/10/15 12:0 a.m.4 views

ALSA-2025:18151 Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime...

9.9CVSS6.4AI score0.66258EPSS
Exploits5References8
EUVD
EUVD
added 2025/10/14 9:30 p.m.5 views

EUVD-2022-55123

In the Linux kernel, the following vulnerability has been resolved: highmem: fix checks in kmaplocalschedin,out When CONFIGDEBUGKMAPLOCAL is enabled kmaplocalschedin,out check that even slots in the tsk-kmapctrl.pteval are unmapped. The slots are initialized with 0 value, but the check is done wi...

5.5CVSS5.3AI score0.00226EPSS
Exploits0References5
Rows per page
Query Builder