41 matches found
dontknowme.at vulnerability
Vulnerable URL: http://www.dontknowme.at/?http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 912787 Google Pagerank| 1 VIP website status:| No Check dontknowme.at SSL connection:| Grade: F...
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2015:1021)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1021 advisory. - jar: directory traversal vulnerability CVE-2005-1080 - IBM JDK: ephemeral RSA keys accepted for non-export SSL/TLS cipher suites FREAK...
Mandriva Linux Security Advisory : ejabberd (MDVSA-2014:005)
A vulnerability has been discovered and corrected in ejabberd : The TLS driver in ejabberd before 2.1.12 supports 1 SSLv2 and 2 weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack CVE-2013-6169. The updated packages have been...
CVE-2013-4508
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network...
CVE-2013-4508
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network...
CVE-2013-4508
lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network...
Information disclosure
The TLS driver in ejabberd before 2.1.12 supports 1 SSLv2 and 2 weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack...
CVE-2013-6169
The TLS driver in ejabberd before 2.1.12 supports 1 SSLv2 and 2 weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack...
Websense Email Security 信息泄露漏洞(CVE-2012-4605)
BUGTRAQ ID: 59313 CVECAN ID: CVE-2012-4605 Websense Email Security是综合的邮件安全软件，对邮件和Web 2.0的混合威胁提供防护。 Websense Email Security 6.1-7.3版本内的SMTP组件的默认配置，在"SurfControl plc\SuperScout Email Filter\SMTP"注册表项中启用了弱SSL密码，远程攻击者通过嗅探网络并对加密会话数据进行暴力攻击，可获取敏感信息。 0 Websense Web Security 7.2 Websense Web Security 7.1...
CVE-2012-4605
The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then...
Default configuration
The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 enables weak SSL ciphers in conf/server.xml, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack...
Default configuration
The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then...
CVE-2012-4605
The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then...
CVE-2009-5119
The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 enables weak SSL ciphers in conf/server.xml, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack...
Juniper Junos J-Web Weak SSL Ciphers (PSN-2011-01-147)
According to its self-reported version number, the remote Junos device contains a J-Web component that supports the use of weak SSL ciphers less than 128-bit. Note: This is considerably easier to exploit if the attacker is on the same physical network. C Tenable Network Security, Inc...
CVE-2011-3013
WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-force attack...
CVE-2011-3013
The CVE-2011-3013 entry affects WebAdmin in Mobility Pack before 1.2 within Novell Data Synchronizer 1.x up to 1.1.2 build 428. The underlying issue is the use of weak SSL ciphers, enabling a remote attacker to potentially gain access via brute-force attempts. Documented impact is partial confide...
Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : openssl-blacklist update (USN-612-9)
USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by introducing openssl-blacklist to aid in detecting vulnerable private keys. This update enhances the openssl-vulnkey tool to check Certificate Signing Requests, accept input from STDIN, and check moduli without ...