Lucene search
+L

1256 matches found

Tenable Nessus
Tenable Nessus
added 2015/04/13 12:0 a.m.54 views

VMware Workspace Portal Multiple Java Vulnerabilities (VMSA-2015-0003) (POODLE)

The VMware Workspace Portal formerly known as VMware Horizon Workspace installed on the remote host is version 2.x prior to 2.1.1. It is, therefore, affected by a man-in-the-middle MitM information disclosure vulnerability known as POODLE. The vulnerability is due to the way SSL 3.0 handles paddi...

10CVSS6.6AI score0.99999EPSS
SaveExploits13References27
Tenable Nessus
Tenable Nessus
added 2015/04/10 12:0 a.m.52 views

VMware vCenter Operations Management Windows JRE Update 1.7.0_76-b13 (VMSA-2015-0003) (POODLE)

The version of VMware vCenter Operations Manager installed on the remote Windows host has a bundled version of the Java JRE prior to version 1.7.076-b13 aka 7.0.760.13. It is, therefore, affected by a man-in-the-middle MitM information disclosure vulnerability known as POODLE. The vulnerability i...

10CVSS6.5AI score0.99999EPSS
SaveExploits13References25
Tenable Nessus
Tenable Nessus
added 2015/04/10 12:0 a.m.87 views

VMware vCenter Operations Management vApp JRE Update 1.7.0_76-b13 (VMSA-2015-0003) (POODLE)

The version of VMware vCenter Operations Manager installed on the remote host has a bundled version of the Java JRE prior to version 1.7.076-b13 aka 7.0.760. It is, therefore, affected by a man-in-the-middle MitM information disclosure vulnerability known as POODLE. The vulnerability is due to th...

10CVSS6.5AI score0.99999EPSS
SaveExploits13References25
Tenable Nessus
Tenable Nessus
added 2015/04/10 12:0 a.m.71 views

VMware vCenter Operations Management Linux JRE Update 1.7.0_76-b13 (VMSA-2015-0003) (POODLE)

The version of VMware vCenter Operations Manager installed on the remote Linux host has a bundled version of the Java JRE prior to version 1.7.076-b13 aka 7.0.760.13. It is, therefore, affected by a man-in-the-middle MitM information disclosure vulnerability known as POODLE. The vulnerability is...

10CVSS6.5AI score0.99999EPSS
SaveExploits13References25
Metasploit
Metasploit
added 2015/03/06 2:41 p.m.51 views

Brocade Enable Login Check Scanner

This module will test a range of Brocade network devices for a privileged logins and report successes. The device authentication mode must be set as 'aaa authentication enable default local'. Telnet authentication, e.g. 'enable telnet authentication', should not be enabled in the device...

7.5CVSS7.5AI score0.53618EPSS
SaveExploits41
RedHat Linux
RedHat Linux
added 2015/02/24 1:20 p.m.6 views

OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)

An improper permission check issue was discovered in the JAX-WS component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

7.2CVSS6.8AI score0.01459EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2015/02/12 12:0 a.m.51 views

Oracle Java SE 6 < Update 86 / 7 < Update 73 / 8 < Update 26 Multiple Vulnerabilities

Binary data 8899.prm...

10CVSS5.2AI score0.06877EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2015/02/05 7:34 p.m.8 views

OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)

An improper permission check issue was discovered in the JAX-WS component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

7.2CVSS6.8AI score0.01459EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2015/02/02 12:0 a.m.51 views

Oracle Java SE JRE Multiple Unspecified Vulnerabilities-03 (Feb 2015) - Windows

Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS4.8AI score0.06877EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2015/01/27 12:0 a.m.38 views

CentOS Update for java CESA-2015:0085 centos5

Check the version of java SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882106";...

10CVSS6.3AI score0.06877EPSS
SaveExploits0References2
OSV
OSV
added 2015/01/24 2:32 p.m.24 views

MGASA-2015-0037 Updated java-1.7.0-openjdk packages fix security vulnerabilities

Updated java-1.7.0 packages fix security vulnerabilities: A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions CVE-2014-6601. Multiple improper...

10CVSS4.8AI score0.67234EPSS
SaveExploits6References5
ArchLinux
ArchLinux
added 2015/01/23 12:0 a.m.71 views

jdk7-openjdk: multiple issues

CVE-2014-3566 man-in-the-middle Nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. - CVE-2014-6585 out-of-bounds read Allows remote attackers to affect confidentiality via font parsing...

10CVSS7.1AI score0.99999EPSS
SaveExploits13References17
ArchLinux
ArchLinux
added 2015/01/23 12:0 a.m.56 views

jdk8-openjdk: multiple issues

CVE-2014-3566 man-in-the-middle Nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. - CVE-2014-6549 arbitrary code execution Incorrect class loader permission check in ClassLoader...

10CVSS6.8AI score0.99999EPSS
SaveExploits13References20
ArchLinux
ArchLinux
added 2015/01/23 12:0 a.m.75 views

jre7-openjdk-headless: multiple issues

CVE-2014-3566 man-in-the-middle Nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. - CVE-2014-6587 privilege escalation MulticastSocket NULL pointer dereference allows local users to...

10CVSS7AI score0.99999EPSS
SaveExploits13References16
OpenVAS
OpenVAS
added 2015/01/23 12:0 a.m.44 views

RedHat Update for java-1.7.0-openjdk RHSA-2015:0067-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.6AI score0.99999EPSS
SaveExploits13References2
RedHat Linux
RedHat Linux
added 2015/01/22 9:34 p.m.5 views

OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)

An improper permission check issue was discovered in the JAX-WS component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

7.2CVSS6.8AI score0.01459EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2015/01/22 12:0 a.m.96 views

Oracle Java SE Multiple Vulnerabilities (January 2015 CPU) (Unix) (POODLE)

The version of Oracle Java SE or Java for Business installed on the remote host is prior to 8 Update 31, 7 Update 75, 6 Update 91, or 5 Update 81. It is, therefore, affected by security vulnerabilities in the following components : - 2D - Deployment - Hotspot - Install - JAX-WS - JSSE - Libraries...

10CVSS6.5AI score0.99999EPSS
SaveExploits13References27
Tenable Nessus
Tenable Nessus
added 2015/01/22 12:0 a.m.49 views

Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20150121) (POODLE)

Multiple flaws were found in the way the Hotspot component in OpenJDK verified bytecode from the class files, and in the way this component generated code for bytecode. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions. CVE-2014-6601,...

10CVSS6.7AI score0.99999EPSS
SaveExploits13References15
Tenable Nessus
Tenable Nessus
added 2015/01/22 12:0 a.m.216 views

Oracle Java SE Multiple Vulnerabilities (January 2015 CPU) (POODLE)

The version of Oracle Java SE or Java for Business installed on the remote host is prior to 8 Update 31, 7 Update 75, 6 Update 91, or 5 Update 81. It is, therefore, affected by security vulnerabilities in the following components : - 2D - Deployment - Hotspot - Install - JAX-WS - JSSE - Libraries...

10CVSS6.5AI score0.99999EPSS
SaveExploits13References27
NVD
NVD
added 2015/01/21 7:59 p.m.15 views

CVE-2015-0412

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS...

7.2CVSS3.3AI score0.01459EPSS
SaveExploits0References24
Rows per page
Query Builder