Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:59:53 +0000 bdu:2015-05174 https://cve.radiocsirt.org/vuln/bdu:2015-05174 bdu:2015-05174 https://cve.radiocsirt.org/vuln/bdu:2015-05174 certa-2010-avi-590 — Deux vulnérabilités ont été corrigées dans OpenSSL. Elles permettent à un utilisateur de contourner la politique de séc… https://cve.radiocsirt.org/vuln/certa-2010-avi-590 certa-2010-avi-590 https://cve.radiocsirt.org/vuln/certa-2010-avi-590 EUVD-2026-120438 https://cve.radiocsirt.org/vuln/euvd-2026-120438 EUVD-2026-120438 https://cve.radiocsirt.org/vuln/euvd-2026-120438 fkie_cve-2010-4180 https://cve.radiocsirt.org/vuln/fkie_cve-2010-4180 <p>OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.</p> <p>OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-4180 GHSA-hvp6-pw37-63wh https://cve.radiocsirt.org/vuln/ghsa-hvp6-pw37-63wh <p>OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.</p> <p>OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.</p> https://cve.radiocsirt.org/vuln/ghsa-hvp6-pw37-63wh gsd-2010-4180 https://cve.radiocsirt.org/vuln/gsd-2010-4180 gsd-2010-4180 https://cve.radiocsirt.org/vuln/gsd-2010-4180 RHSA-2010:0977 — Red Hat Security Advisory: openssl security update https://cve.radiocsirt.org/vuln/rhsa-2010:0977 <p>openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG downgrade-to-disabled ciphersuite attack openssl: missing bn_wexpand return value checks openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack</p> <p>openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG downgrade-to-disabled ciphersuite attack openssl: missing bn_wexpand return value checks openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack</p> https://cve.radiocsirt.org/vuln/rhsa-2010:0977 SUSE-SU-2015:1184-1 — Security update for OpenSSL https://cve.radiocsirt.org/vuln/suse-su-2015:1184-1 <p>Security update for OpenSSL</p> <p>Security update for OpenSSL</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1184-1