Most recent entries from all

bdu:2015-00642

certfr-2014-ale-007 — Une vulnérabilité a été découverte dans la version 3 du protocole SSL permettant de sécuris…

certfr-2014-ale-007

certfr-2014-avi-436 — De multiples vulnérabilités ont été corrigées dans les produits Apple. Certaines d'entre el…

certfr-2014-avi-436

EUVD-2026-322512

fkie_cve-2014-3566

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

GHSA-r82h-wc4x-gcp9

gsd-2014-3566

ICSMA-18-058-02 — Philips Intellispace Portal ISP Vulnerabilities

Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability i…

openSUSE-SU-2024:10275-1 — monit-5.20.0-1.1 on GA media

monit-5.20.0-1.1 on GA media

RHBA-2014:1857 — Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update

SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack

SUSE-FU-2022:0039-1 — Feature update for zxing-cpp libreoffice

Feature update for zxing-cpp libreoffice

UBUNTU-CVE-2014-3566

Affected: Ubuntu:14.04:LTS: openjdk-6, Ubuntu:14.04:LTS: openjdk-7, Ubuntu:14.04:LTS: openssl, Ubuntu:Pro:14.04:LTS: pound, Ubuntu:25.10: pound

WID-SEC-W-2023-0431 — SSL 3.0: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in SSL 3.0 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.