Lucene search
+L

91851 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:51 a.m.6 views

SUSE CVE-2020-35662

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated...

9.4CVSS9.3AI score0.02978EPSS
SaveExploits0References32
SUSE CVE
SUSE CVE
added 2023/02/15 3:34 a.m.17 views

SUSE CVE-2022-1292

The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the...

6.7CVSS6.9AI score0.82612EPSS
SaveExploits5References101
SUSE CVE
SUSE CVE
added 2023/02/15 3:22 a.m.5 views

SUSE CVE-2022-45197

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS7.5AI score0.00473EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:22 a.m.3 views

SUSE CVE-2023-0216

An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2iPKCS7, d2iPKCS7bio or d2iPKCS7fp functions. The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in...

5.9CVSS7.3AI score0.01846EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/02/15 12:00 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2023:0408-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.9AI score0.81464EPSS
SaveExploits5References2
NVD
NVD
added 2023/02/14 6:15 p.m.31 views

CVE-2022-41564

The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL password to a privileged user. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.1.0...

6.8CVSS6.6AI score0.0047EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/14 2:55 p.m.75 views

Security Bulletin: IBM QRadar SIEM is vulnerable to possible information disclosure [CVE-2023-22875]

Summary IBM QRadar SIEM copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. The key remains within the QRadar deployment. However, if you allow users other than QRadar system administrators to access manag...

8.4CVSS7.9AI score0.00308EPSS
SaveExploits0Affected Software1
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.15 views

JSA10590 - 2013-09 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Crafted packet can cause denial of service

Last Modified Date Aug 24, 2026 12:34:46 AM...

5.4CVSS5.8AI score0.01831EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.18 views

JSA10482 - 2011-07 Out of Cycle Security Bulletin: Multiple Products; TLS/SSL Renegotiation Vulnerability (CVE-2009-3555)

Last Modified Date Aug 24, 2026 12:34:49 AM...

9.8CVSS6.8AI score0.87264EPSS
SaveExploits16
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.9 views

JSA10656 - 2014-10 Out of Cycle Security Bulletin: Multiple products affected by SSL POODLE vulnerability (CVE-2014-3566)

Last Modified Date Aug 24, 2026 12:35:24 AM...

4.3CVSS6.7AI score0.99999EPSS
SaveExploits7
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.28 views

JSA10396 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) - OpenSSL - Incorrect checks for malformed signatures on DSA and ECDSA keys used with SSL/TLS on backend servers. CVE-2008-5077.

Last Modified Date Aug 24, 2026 12:35:02 AM...

5.8CVSS6.8AI score0.05146EPSS
SaveExploits1
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.16 views

SA40013 - TLS/SSL Renegotiation Vulnerability Pulse Connect Secure (PCS) (CVE-2009-3555) (Pulse Secure PSN-2009-11-573

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. The industry-wide TLS/SSL renegotiation issue CVE-2009-3555 has been found in the Pulse Connect Secure PCS device. This issue has been reported as a man in the middle MITM attack by ma...

5.8CVSS6.4AI score0.87264EPSS
SaveExploits16
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.14 views

JSA10647 - 2014-09 Security Bulletin: Junos Pulse Secure Access Service (SSL VPN): Clickjacking issue (CVE-2014-3823)

Last Modified Date Aug 24, 2026 12:35:25 AM...

4.3CVSS5.8AI score0.00958EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.26 views

SA40886 - ssl3_read_bytes Function Denial of Service Vulnerability (CVE-2016-8610)

Last Modified Date Aug 24, 2026 12:34:38 AM...

7.5CVSS6.7AI score0.39657EPSS
SaveExploits1
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.11 views

SA43620 - 2018-01 Out-Of-Cycle Advisory : Pulse Secure Desktop Linux Client - SSL Certificate Validation Issue

Last Modified Date Aug 24, 2026 12:35:13 AM...

6.5CVSS6.6AI score0.00616EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2023/02/14 12:00 a.m.6 views

CVE-2022-41564 TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability

The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL password to a privileged user. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.1.0...

6.8CVSS6.7AI score0.0047EPSS
SaveExploits0References1
CVE
CVE
added 2023/02/14 12:00 a.m.77 views

CVE-2022-41564

CVE-2022-41564 affects TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail; the Hawk Console component exposes EMS transport and EMS SSL passwords to a privileged user. Affected releases: TIBCO Hawk 6.1.0–6.2.1 and Hawk RedTail 7.0.0–7.2.0. Root cause and exact exploit path are not detaile...

6.8CVSS6.5AI score0.0047EPSS
SaveExploits0References1Affected Software2
OSV
OSV
added 2023/02/10 8:15 p.m.12 views

CVE-2022-34364

Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user...

4.4CVSS5.8AI score0.00186EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/10 8:15 p.m.19 views

CVE-2022-34364

Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user...

4.4CVSS4.5AI score0.00186EPSS
SaveExploits0References1
Prion
Prion
added 2023/02/10 8:15 p.m.22 views

Design/Logic Flaw

Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user...

1.4CVSS5.5AI score0.00186EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder