MiracleLinux 4 : pki-core-9.0.3-43.AXS4 (AXSA:2015-401:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-401:01 advisory. ================================== || ABOUT CERTIFICATE SYSTEM || ================================== Certificate System CS is an enterprise software system...

PT-2024-10931 · Unknown · Nats Server

Name of the Vulnerable Software and Affected Versions: nats-server versions prior to 2.2.3 Description: The issue concerns cryptographic problems in the nats-server, where the use of CLI flags to set TLS parameters overrides the default restricted ciphersuite settings, potentially allowing client...

SUSE-SU-2023:2183-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-prometheus-alertmanager: - Security issues fixed: CVE-2022-46146: Fix authentication bypass via cache poisoning bsc1208051 prometheus-blackboxexporter: - Security issues fixed: CVE-2022-46146: Fix authentication bypass via cache poisoning...

Siemens SCALANCE Allocation of Resources Without Limits or Throttling (CVE-2022-36324)

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack. This plugin only works with Tenable.ot. Please...

CVE-2022-36324

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack...

CVE-2022-36324

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack...

CLSA-2022-1656430138 Fixed CVEs in curl: CVE-2022-27780, CVE-2022-27781, CVE-2022-27782

CVE-2022-27782: check additional TLS or SSH connection parameters that should have prohibited connection reuse - CVE-2022-27781: add limit of certificates which can be traversed breaking possible infinite loop - CVE-2022-27780: exclude malicious characters from url to prevent incorrect address...