Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-14888

Malicious code in bioql PyPI...

5.9CVSS6.3AI score0.00192EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2019/01/31 2:10 a.m.45 views

Security Bulletin: Vulnerability in RC4 cipher stream and multiple vulnerabilities in IBM SDK Java Technology Edition affects IBM Systems Director

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition 7 that is used by IBM Systems Director. These issues were disclosed as part of the IBM Java SDK updates in January and April 2015. This bulletin also addresses the RC4 bar mitzvah attack on SSL/TLS. Vulnerability Detail...

7.5CVSS0.6AI score0.74006EPSS
Exploits5
Kitploit
Kitploit
added 2018/11/24 12:43 p.m.1008 views

Sn1per v6.0 - Automated Pentest Framework For Offensive Security Experts

Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers and Corporate Security teams to manage...

9.8CVSS10AI score0.99999EPSS
Exploits341References3
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:25 p.m.39 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Security Directory Integrator

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 5.0 , Version 6.0 and Version 7.0 that is used by Security Directory Integrator. Some of these issues were disclosed as part of the IBM Java SDK updates in April 2015. This bulletin also address...

5CVSS1AI score0.9986EPSS
Exploits0Affected Software1
OSV
OSV
added 2015/05/11 8:10 p.m.5 views

MGASA-2015-0212 Updated async-http-client packages fix security vulnerabilities

Updated async-http-client packages fix security vulnerabilities: It was found that async-http-client would disable SSL/TLS certificate verification under certain conditions, for example if HTTPS communication also uses client certificates. This can be exploited by a Man-in-the-middle MITM attack...

4.3CVSS6.1AI score0.00993EPSS
Exploits0References3
OSV
OSV
added 2014/08/25 8:44 a.m.5 views

MGASA-2014-0348 Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerabilities

Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerabilities: The Jakarta Commons HttpClient component may be susceptible to a 'Man in the Middle Attack' due to a flaw in the default hostname verification during SSL/TLS when a specially crafted server side...

5.8CVSS6.3AI score0.09149EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2013/02/11 12:0 a.m.48 views

CentOS Update for java CESA-2013:0245 centos6

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2013:0245 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

10CVSS0.5AI score0.07936EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2013/02/10 12:0 a.m.67 views

Scientific Linux Security Update : java-1.7.0-openjdk on SL5.x, SL6.x i386/x86_64 (20130208)

Multiple improper permission check issues were discovered in the AWT, CORBA, JMX, Libraries, and Beans components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. CVE-2013-0442, CVE-2013-0445, CVE-2013-0441, CVE-2013-1475, CVE-2013-147...

10CVSS7.9AI score0.89987EPSS
Exploits10References23
Rows per page
Query Builder