Lucene search
+L

5 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2018-10844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct...

5.9CVSS6.5AI score0.03623EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/25 12:00 a.m.•1 views

CVE-2023-46658: Incorrect Comparison

Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token...

5.3CVSS5.6AI score0.00569EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/06 12:00 a.m.•5 views

CVE-2023-41935: Incorrect Comparison

Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b1154b3fb, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce...

7.5CVSS7.3AI score0.00809EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/06 12:00 a.m.•19 views

Jenkins Plugin Azure AD Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

7.5CVSS6.7AI score0.00809EPSS
SaveExploits0References4
CVE
CVE
•added 2006/07/07 12:00 a.m.•61 views

CVE-2006-3410

CVE-2006-3410 affects Tor prior to 0.1.1.20. The vulnerability stems from how the client builds internal circuits, consisting mainly of nodes with “useful exit nodes,” which could enable remote attackers to perform unspecified statistical attacks and impact confidentiality. Documented impact from...

5CVSS6.7AI score0.01617EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder