77 matches found
Xerox WorkCentre 4260 / 4265 Multiple Vulnerabilities (XRX15AV) (FREAK) (Logjam)
According to its model number and software version, the remote Xerox WorkCentre 4260 / 4265 device is affected by multiple vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, exists due to the support of weak EXPORTRSA cipher suites wit...
Mozilla Thunderbird < 38.1 Multiple Vulnerabilities (Logjam)
Binary data 8879.prm...
AIX OpenSSL Advisory : openssl_advisory14.asc (Logjam)
The version of OpenSSL installed on the remote AIX host is affected by multiple vulnerabilities : - An invalid free memory error exists due to improper validation of user-supplied input when a DTLS peer receives application data between ChangeCipherSpec and Finished messages. A remote attacker ca...
Oracle JRockit R28 < R28.3.7 Multiple Vulnerabilities (July 2015 CPU) (Bar Mitzvah) (Logjam)
The version of Oracle JRockit installed on the remote Windows host is R28 prior to R28.3.7. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the JCE component that allows a remote attacker to gain access to sensitive information. CVE-2015-2601 - An...
Firefox ESR < 31.8 Multiple Vulnerabilities (Mac OS X) (Logjam)
The version of Firefox ESR installed on the remote Mac OS X host i prior to 31.8. It is, therefore, affected by multiple vulnerabilities : - A security downgrade vulnerability exists due to a flaw in Network Security Services NSS. When a client allows for a ECDHEECDSA exchange, but the server doe...
CVE-2 0 1 4-6 3 2 1 schannel heap overflow vulnerability analysis-vulnerability warning-the black bar safety net
0x00 background MS14-0 6 6 CVE-2 0 1 4-6 3 2 1 is present in Microsoft's schannel. dll in the TLS heap buffer overflow vulnerability. The following principles and poc structure for analysis. 0x01 SSL/TLS principle description Https is based on SSL/TLS Http, all http data is in the SSL/TLS Protoco...
Windows secure channel remote code execution vulnerability, CVE-2 0 1 4-6 3 2 1）Analysis-vulnerability warning-the black bar safety net
I. background Windows secure channel Secure Channel, Schannel）surprise the reported vulnerability, Microsoft recently released as a major grade MS14-0 6 6 information security Bulletin, revealed in the Schannel remote code execution vulnerability, CVE-2 0 1 4-6 3 2 1 in. The affected Microsoft...
RHEL 7 : openssl (RHSA-2014:0679)
Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
OpenSSL re-aeration of the CCS injection vulnerability-vulnerability warning-the black bar safety net
Too much drama last night to see a good piece has about, also good, 2 0 1 2 edition of the perfect memories on, like me such people still choose to use the TV or go to the cinema to see the movie, in the middle of no commercials, experience holding back process, always Suddenly have a lot of idea...
Digi International Gateways Vulnerable to Heartbleed
Wireless Web mesh gateways used everywhere from industrial control environments to home area networks are vulnerable to the Heartbleed OpenSSL vulnerability. The Industrial Control System Computer Emergency Response Team ICS-CERT issued an advisory Thursday warning SCADA and ICS managers with Dig...
Critical: java-1.6.0-openjdk
Issue Overview: A flaw was found in the Java RMI Remote Method Invocation registry implementation. A remote RMI client could use this flaw to execute arbitrary code on the RMI server running the registry. CVE-2011-3556 A flaw was found in the Java RMI registry implementation. A remote RMI client...
Automated HTTPS Vulnerability Testing by Qualys SSL Labs
Automated HTTPS Vulnerability Testing by Qualys SSL Labs One of main problem in HTTP protocol is encrypting traffic and verifying data security, securing the web application against any threat is very important especially that if hackers conduct a Man-in the middle attack he can get all users...
apache2 vulnerabilities
No description provided by source. =========================================================== Ubuntu Security Notice USN-860-1 November 19, 2009 apache2 vulnerabilities CVE-2009-3094, CVE-2009-3095, CVE-2009-3555 =========================================================== A security issue affect...
HP-UX Update for BIND v920 HPSBUX00290
Check for the Version of BIND v920 OpenVAS Vulnerability Test HP-UX Update for BIND v920 HPSBUX00290 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
HP-UX Update for BIND v920 HPSBUX00290
Check for the Version of BIND v920 OpenVAS Vulnerability Test HP-UX Update for BIND v920 HPSBUX00290 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Debian Security Advisory DSA 1581-1 (gnutls13)
The remote host is missing an update to gnutls13 announced via advisory DSA 1581-1. OpenVAS Vulnerability Test $Id: deb15811.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1581-1 gnutls13 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
