7 matches found
Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3572)
A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory...
Cisco ASA Improper Resource Shutdown or Release (CVE-2023-20042)
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an...
CVE-2023-20042
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an...
PT-2022-7315
Name of the Vulnerable Software and Affected Versions Apple Music versions prior to 3.9.10 for Android Description The issue is related to the incorrect management of TLS and SSL protocol sessions in the Apple Music application for Android, allowing a remote attacker to intercept user sessions...
CVE-2020-3572: Uncontrolled Resource Consumption
A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory...
OpenSSL Alternative Chains Certificate Forgery MITM Proxy
This module exploits a logic error in OpenSSL by impersonating the server and sending a specially-crafted chain of certificates, resulting in certain checks on untrusted certificates to be bypassed on the client, allowing it to use a valid leaf certificate as a CA certificate to sign a fake...
Microsoft Windows Security Feature Bypass Vulnerability (2785220)
This host is missing an important security update according to Microsoft Bulletin MS13-006. OpenVAS Vulnerability Test $Id: secpodms13-006.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Security Feature Bypass Vulnerability 2785220 Authors: Veerendra G.G Copyright: Copyright c 2013 SecPod...