Lucene search
+L

91853 matches found

Fedora
Fedora
added 2022/09/19 1:21 a.m.40 views

[SECURITY] Fedora 35 Update: curl-7.79.1-6.fc35

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

3.7CVSS6.7AI score0.01947EPSS
SaveExploits1
Veracode
Veracode
added 2022/09/16 9:14 p.m.30 views

Denial Of Service (DoS)

wolfSSL is vulnerable to denial of service. The vulnerability exists when client connects to a wolfSSL server and SSLclear due to improper session handling which allows an attacker to cause an application crash...

7.5CVSS7AI score0.02739EPSS
SaveExploits2References8Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/15 6:51 p.m.54 views

Security Bulletin: Vulnerability in IBM WebSphere Application Server affects WebSphere Process Server and WebSphere Process Server Hypervisor Editions (CVE-2015-0138)

Summary The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects IBM WebSphere Application Server Full Profile and IBM WebSphere Application Server Hypervisor Edition that is used by WebSphere Process Server and WebSphere Process Server Hypervisor Editions...

4.3CVSS4.6AI score0.02795EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/15 6:50 p.m.17 views

Security Bulletin: Vulnerability in RC4 stream cipher affects WebSphere Process Server (WPS) and WPS Hypervisor editions (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” attack for SSL/TLS affects IBM WebSphere Application Server that is used by WebSphere Process Server WPS and WPS Hypervisor editions. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow ...

5CVSS6.6AI score0.73851EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/15 6:50 p.m.65 views

Security Bulletin: Multiple vulnerabilities in the IBM SDK for Java™ Technology Edition April 2015 CPU affect WebSphere Process Server

Summary There are multiple vulnerabilities in IBM SDK for Java™ Technology Edition that is used by WebSphere Process Server. These issues were disclosed as part of the IBM SDK for Java Technology Edition updates in April 2015. Vulnerability Details CVEID: CVE-2015-0488 DESCRIPTION: An unspecified...

5CVSS6.9AI score0.98685EPSS
SaveExploits0Affected Software2
OpenVAS
OpenVAS
added 2022/09/15 12:00 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2022:3267-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6AI score0.0074EPSS
SaveExploits0References2
HPE Security Bulletins
HPE Security Bulletins
added 2022/09/15 12:00 a.m.12 views

HPESBHF04366 rev.3 - HPE Integrated Lights-Out 5 (iLO 5), or Integrated Lights-out 4 (iLO 4) Using OpenSSL, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.72 HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.81 HP ConvergedSystem 700 - Varies, based on server...

7.5CVSS6.6AI score0.73188EPSS
SaveExploits2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/14 3:28 p.m.20 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Buinses Automation Workflow and IBM Business Process Manager (CVE-2022-22365)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow and IBM Business Process Manager. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details...

5.9CVSS5.6AI score0.00582EPSS
SaveExploits0Affected Software6
Kitploit
Kitploit
added 2022/09/14 11:30 a.m.61 views

SDomDiscover - A Easy-To-Use Python Tool To Perform DNS Recon

/ // \ / \ \ / / / / / / / / / / / / \ | / / / / / / // / // / / / / / / // / // // / |/ / / / ///// // ///////|/// A easy-to-use python tool to perform dns recon with multiple options Installation: It can be installed in any OS with python3 Manual installation git clone...

7.3AI score
SaveExploits0References1
OSV
OSV
added 2022/09/14 4:25 a.m.2 views

SUSE-SU-2022:3267-1 Security update for libzapojit

This update for libzapojit fixes the following issues: - CVE-2021-39360: Fixed missing guard against invalid SSL certificates bsc1189844...

5.9CVSS6AI score0.0074EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/14 4:24 a.m.5 views

SUSE-SU-2022:3266-1 Security update for libzapojit

This update for libzapojit fixes the following issues: - CVE-2021-39360: Fixed missing guard against invalid SSL certificates bsc1189844...

5.9CVSS6AI score0.0074EPSS
SaveExploits0References3
Fedora
Fedora
added 2022/09/14 12:23 a.m.53 views

[SECURITY] Fedora 37 Update: curl-7.85.0-1.fc37

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

3.7CVSS6.7AI score0.01947EPSS
SaveExploits1
NVD
NVD
added 2022/09/13 10:15 p.m.40 views

CVE-2022-35413

WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information such as SSL keys via an HTTPS request to the /webapi/ URI on port 443 or 5001...

9.8CVSS0.14054EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/13 10:15 p.m.12 views

CVE-2022-35413

WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information such as SSL keys via an HTTPS request to the /webapi/ URI on port 443 or 5001...

9.8CVSS5.8AI score0.14054EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/09/13 10:15 p.m.5 views

CVE-2022-35413

WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information such as SSL keys via an HTTPS request to the /webapi/ URI on port 443 or 5001...

9.8CVSS7.3AI score0.14054EPSS
SaveExploits0References6
Prion
Prion
added 2022/09/13 10:15 p.m.21 views

Hardcoded credentials

WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information such as SSL keys via an HTTPS request to the /webapi/ URI on port 443 or 5001...

7.5CVSS9.2AI score0.14054EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2022/09/13 10:00 p.m.100 views

CVE-2022-35413

WAPPLES Web Application Firewall

9.8CVSS9.3AI score0.14054EPSS
SaveIn wildExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/09/13 10:00 p.m.41 views

CVE-2022-35413

WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information such as SSL keys via an HTTPS request to the /webapi/ URI on port 443 or 5001...

9.6AI score0.14054EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/13 12:00 a.m.12 views

PT-2022-22814 · Wapples · Wapples

Name of the Vulnerable Software and Affected Versions: WAPPLES versions through 6.0 Description: A threat actor could use a hardcoded systemi account to access the system configuration and confidential information, such as SSL keys, via an HTTPS request to the "/webapi/" URI on port 443 or 5001...

9.8CVSS9.1AI score0.14054EPSS
SaveExploits0References7
Fedora
Fedora
added 2022/09/12 5:48 p.m.19 views

[SECURITY] Fedora 37 Update: curl-7.84.0-3.fc37

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

7.7AI score
SaveExploits0
Rows per page
Query Builder