409 matches found
RHEL 6 : openstack-nova (RHSA-2014:0112)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0112 advisory. The openstack-nova packages provide OpenStack Compute nova, which provides services for provisioning, managing, and using virtual machine...
HPESBHF04810 rev.1 - HPE ProLiant DX Servers Using OpenSSL, Multiple Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to v3.2005-27-2024 HPE ProLiant DX190r Gen10 server - Prior to v3.2005-27-2024 HPE ProLiant DX360 Gen10...
Moxa EDR-G903 Series Routers EDR Cryptographic Issues (CVE-2012-4694)
Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for 1 SSH and 2 SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation...
K4944: SSL decryption vulnerabilities CR47778, CR48873, CR53987, and CR54002
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...
Vulnerabilities fixed in Microsoft Visual Studio
Microsoft has fixed vulnerabilities in Microsoft Visual Studio. The vulnerabilities allow a malicious person to perform attacks execute attacks that result in the following categories of damage: Access to sensitive data. Spoofing, Denial-of-Service DoS The vulnerabilities with characteristics...
Fix of CVE: CVE-2020-8517, CVE-2021-28651, CVE-2020-15049, CVE-2020-8449, CVE-2020-8450, CVE-2020-24606, CVE-2020-25097, CVE-2020-11945, CVE-2020-14058
CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack - CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-25097: fix improper input validation allowing HTTP smuggling from trusted client -...
SUSE: Security Advisory (SUSE-SU-2015:0841-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-2015-3193, CVE-2015-3195, CVE-2015-1794)
Summary SSL vulnerabilities were disclosed on December 3rd, 2015. IBM DataPower Gateways has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-3193 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the x8664 Montgomery...
Security Bulletin: Multiple vulnerabilities in SSL affect IBM DataPower Gateways
Summary SSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. IBM DataPower Gateways has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error when parsing DSA privat...
Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways
Summary SSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. IBM DataPower Gateways has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by a buffer...
OPENSUSE-SU-2020:1873-1 Security update for apache-commons-httpclient
This update for apache-commons-httpclient fixes the following issues: - http/conn/ssl/SSLConnectionSocketFactory.java ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service HTTPS call hang via unspecified vectors...
The vulnerabilities in the functions of ec_err.c and ec_lib.c from the OpenSSL library allow a malicious individual to gain unauthorized access to protected information.
The vulnerability in the functions of ecerr.c and eclib.c from the OpenSSL library is related to the lack of data encryption measures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with Rational ClearQuest (CVE-2013-6747, CVE-2014-0963)
Summary IBM DB2 is shipped as a component of IBM Rational ClearQuest CQ. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Foll...
Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1792)
Summary SSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. IBM DataPower Gateways has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error when processing an ECParameters...
Cheap International Calls & Low Cost Roaming - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Cheap International Calls & Low Cost Roaming published at the 'play' market has multiple vulnerabilities...
Maxim: order a taxi - Customized SSL, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Maxim: order a taxi published at the 'play' market has multiple vulnerabilities...
MobiPay - BSD license, Base64 encoded String, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application MobiPay published at the 'play' market has multiple vulnerabilities...
Philips Hue gen 1 - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Philips Hue gen 1 published at the 'play' market has multiple vulnerabilities...
Firefox Browser fast & private - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Firefox Browser fast & private published at the 'play' market has multiple vulnerabilities...