Lucene search
+L

654 matches found

OSV
OSV
added 2016/04/13 5:59 p.m.4 views

UBUNTU-CVE-2016-0787

The diffiehellmansha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."...

5.9CVSS6.9AI score0.02697EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/04/13 5:0 p.m.28 views

CVE-2016-0787

The diffiehellmansha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."...

5.8AI score0.02697EPSS
Exploits0References12
Microsoft KB
Microsoft KB
added 2016/04/12 7:0 a.m.265 views

MS16-047: Description of the security update for SAM and LSAD remote protocols: April 12, 2016

None None...

6.8CVSS6.8AI score0.20877EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2016/04/12 7:0 a.m.46 views

Internet Explorer help

None None...

7.8CVSS7.1AI score0.15764EPSS
Exploits1
Microsoft KB
Microsoft KB
added 2016/04/12 7:0 a.m.139 views

MS16-039: Description of the security update for Windows Graphics Component: April 12, 2016

None None...

9.3CVSS7AI score0.43272EPSS
Exploits5
Tenable Nessus
Tenable Nessus
added 2016/03/25 12:0 a.m.25 views

openSUSE Security Update : libssh2_org (openSUSE-2016-388)

This update for libssh2org fixes the following issues : Security issue fixed : - CVE-2016-0787 bsc967026: Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys. A feature was added : - Support of SHA256 digests for...

5.9CVSS6.4AI score0.02697EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2016/03/14 12:0 a.m.32 views

SUSE SLED12 / SLES12 Security Update : libssh2_org (SUSE-SU-2016:0718-1)

This update for libssh2org fixes the following issues : Security issue fixed : - CVE-2016-0787 bsc967026: Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys. A feature was added : - Support of SHA256 digests for...

5.9CVSS6.5AI score0.02697EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2016/03/14 12:0 a.m.25 views

SUSE SLED11 / SLES11 Security Update : libssh2_org (SUSE-SU-2016:0723-1)

This update for libssh2org fixes the following issues : - Add SHA256 support for DH group exchange fate320343, bsc961964 - fix CVE-2016-0787 bsc967026 - Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys. Note...

5.9CVSS6.5AI score0.02697EPSS
Exploits0References5
OSV
OSV
added 2016/03/11 10:18 a.m.8 views

SUSE-SU-2016:0723-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - Add SHA256 support for DH group exchange fate320343, bsc961964 - fix CVE-2016-0787 bsc967026 Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys...

5.9CVSS5.9AI score0.02697EPSS
Exploits0References4
OSV
OSV
added 2016/03/11 9:18 a.m.11 views

SUSE-SU-2016:0718-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: Security issue fixed: - CVE-2016-0787 bsc967026: Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys. A feature was added: - Support of SHA256 digests for DH...

5.9CVSS5.9AI score0.02697EPSS
Exploits0References5
Microsoft KB
Microsoft KB
added 2016/03/08 12:0 a.m.34 views

MS16-026: Description of the security update for graphic fonts: March 8, 2016

None None...

6.1AI score
Exploits0
Microsoft KB
Microsoft KB
added 2016/02/09 12:0 a.m.55 views

MS16-016: Description of the security update for WebDAV: February 9, 2016

None None...

6.1AI score
Exploits0
Microsoft KB
Microsoft KB
added 2016/02/09 12:0 a.m.26 views

MS16-013: Description of the security update for Windows Journal: February 9, 2016

None None...

6.1AI score
Exploits0
Microsoft KB
Microsoft KB
added 2016/01/12 12:0 a.m.28 views

MS16-007: Description of the security update for Windows: January 12, 2016

None None...

6.1AI score
Exploits0
Microsoft KB
Microsoft KB
added 2016/01/12 12:0 a.m.35 views

MS16-007: Description of the security update for Windows: January 12, 2016

None None...

6.1AI score
Exploits0
Microsoft KB
Microsoft KB
added 2015/12/08 12:0 a.m.23 views

MS15-130: Security update for Microsoft Uniscribe to address remote code execution: December 8, 2015

None None...

6.1AI score
Exploits0
The Hacker News
The Hacker News
added 2015/09/18 11:4 p.m.17 views

Google to Disable Weak SSLv3 and RC4 Protocols to Boost Internet Security

It is finally time to say GoodBye to the old and insecure Web security protocols. Citing the long history of weaknesses in the Secure Sockets Layer SSL 3.0 cryptographic protocol and the RC4 Cipher Suite, Google plans to disable support for both SSLv3 as well as RC4 stream cipher in its front-end...

6.7AI score
Exploits0
Packet Storm
Packet Storm
added 2015/09/08 12:0 a.m.33 views

Disconnect.me 2.0 Local Root Exploit

Disconnect.me is the search engine entrusted by the Tor Browser. Unfortunately, the Mac OS X client has an LPE to root vulnerability 0day. Original Download = v2.0: https://disconnect.me/premium/mac Archived Download: http://d-h.st/LKqG Disconnect+Desktop.pkg: sha256 =...

7.4AI score
Exploits0
0day.today
0day.today
added 2015/09/07 12:0 a.m.28 views

Disconnect.me Mac OS X Client <= 2.0 - Local Privilege Escalation Vulnerability

Exploit for macOS platform in category local exploits Disconnect.me is the search engine entrusted by the Tor Browser. Unfortunately, the Mac OS X client has an LPE to root vulnerability 0day. Original Download = v2.0: https://disconnect.me/premium/mac Archived Download: http://d-h.st/LKqG...

6.8AI score
Exploits0
exploitpack
exploitpack
added 2015/09/06 12:0 a.m.20 views

Disconnect.me Mac OSX Client 2.0 - Local Privilege Escalation

Disconnect.me Mac OSX Client 2.0 - Local Privilege Escalation Disconnect.me is the search engine entrusted by the Tor Browser. Unfortunately, the Mac OS X client has an LPE to root vulnerability 0day. Original Download = v2.0: https://disconnect.me/premium/mac Archived Download: http://d-h.st/LKq...

0.1AI score
Exploits0
Rows per page
Query Builder