CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

193 matches found

NVD•added 2023/07/11 10:15 a.m.•35 views

CVE-2023-36748

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

6.8CVSS6AI score0.00243EPSS

SaveExploits0References1

Prion•added 2023/07/11 10:15 a.m.•29 views

Design/Logic Flaw

4CVSS6.5AI score0.00243EPSS

SaveExploits0References1Affected Software11

Vulnrichment•added 2023/07/11 9:07 a.m.•12 views

CVE-2023-36748

5.9CVSS6.7AI score0.00243EPSS

SaveExploits0References1

Cvelist•added 2023/07/11 9:07 a.m.•41 views

CVE-2023-36748

5.9CVSS6.4AI score0.00243EPSS

SaveExploits0References1

CVE•added 2023/07/11 9:07 a.m.•64 views

CVE-2023-36748

CVE-2023-36748 affects Siemens RUGGEDCOM ROX family (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with all versions before V2.16.0. The root cause is that these devices are configured to offer weak ciphers by default, enabling an attacker in a man‑in‑th...

6.8CVSS6.2AI score0.00243EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/07/11 12:00 a.m.•0 views

CVE-2023-36748: Inadequate Encryption Strength

6.8CVSS6.3AI score0.00243EPSS

SaveExploits0References3

CNNVD•added 2023/05/05 12:00 a.m.•7 views

Libreswan 安全漏洞

Libreswan is an IPsec implementation similar to Openswan, which is primarily used to ensure security and integrity issues in data transmission. A security vulnerability exists in Libreswan that stems from a crash of the pluto daemon state machine when IKEv1 attack mode packets are received using...

7.5CVSS6.7AI score0.01581EPSS

SaveExploits0References6

Prion•added 2023/04/11 10:15 a.m.•26 views

Design/Logic Flaw

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

4CVSS7.1AI score0.00256EPSS

SaveExploits0References1Affected Software13

Vulnrichment•added 2023/04/11 9:03 a.m.•11 views

CVE-2023-29054

6.7CVSS6.8AI score0.00256EPSS

SaveExploits0References1

Cvelist•added 2023/04/11 9:03 a.m.•47 views

CVE-2023-29054

6.7CVSS7.2AI score0.00256EPSS

SaveExploits0References1

CVE•added 2023/04/11 9:03 a.m.•82 views

CVE-2023-29054

CVE-2023-29054 affects Siemens SCALANCE devices (X200-4P IRT, X201-3P IRT/IRT PRO, X202-2IRT/IRT PRO/2P, X204IRT, XF201-3P/XF202-2P/XF204IRT, SIPLUS NET X202-2P IRT) with all versions

7.4CVSS7AI score0.00256EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/04/11 12:00 a.m.•1 views

CVE-2023-29054: Inadequate Encryption Strength

7.4CVSS5.7AI score0.00256EPSS

SaveExploits0References2

Citrix•added 2023/03/20 12:00 a.m.•16 views

Active TLS1.1 and Weak Ciphers Causing environment Vulnerabilities

This Tech Paper aims to convey what someone skilled in ADC would configure as a generic implementation to receive an A+ grade atQualys SSL Labs...

7AI score

SaveExploits0

SUSE CVE•added 2023/02/15 6:21 a.m.•8 views

SUSE CVE-2003-0192

Apache 2 before 2.0.47, and certain versions of modssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite...

6.4CVSS6.9AI score0.05993EPSS

SaveExploits0References5

SUSE CVE•added 2023/02/15 5:35 a.m.•10 views

SUSE CVE-2013-4508

lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network...

7.5CVSS6.6AI score0.02626EPSS

SaveExploits1References3

SUSE CVE•added 2023/02/15 3:33 a.m.•8 views

SUSE CVE-2022-1434

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an OpenSSL 3.0 recipie...

8.8CVSS6.8AI score0.01061EPSS

SaveExploits0References4

OSV•added 2023/02/01 8:35 a.m.•7 views

SUSE-SU-2023:0222-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to brute force a user's password bsc1206546. - CVE-2022-38023: Disabled weak ciphers by default in the Netlogon Secure...

8.1CVSS7.1AI score0.02517EPSS

SaveExploits1References7

OpenVAS•added 2023/01/25 12:00 a.m.•25 views

SUSE: Security Advisory (SUSE-SU-2023:0126-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.5AI score0.02517EPSS

SaveExploits1References6

OSV•added 2023/01/24 12:22 p.m.•6 views

SUSE-SU-2023:0126-1 Security update for samba

8.1CVSS7.1AI score0.02517EPSS

SaveExploits1References7

OSV•added 2023/01/23 8:34 a.m.•8 views

SUSE-SU-2023:0122-1 Security update for samba

8.1CVSS6.7AI score0.02517EPSS

SaveExploits1References11

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by