https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:25:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-06127 bdu:2015-06127 https://cve.radiocsirt.org/vuln/bdu:2015-06127 https://cve.radiocsirt.org/vuln/certfr-2015-avi-008 certfr-2015-avi-008 https://cve.radiocsirt.org/vuln/certfr-2015-avi-008 https://cve.radiocsirt.org/vuln/cnvd-2015-00215 cnvd-2015-00215 https://cve.radiocsirt.org/vuln/cnvd-2015-00215 https://cve.radiocsirt.org/vuln/euvd-2026-89216 EUVD-2026-89216 https://cve.radiocsirt.org/vuln/euvd-2026-89216 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0204 <p>The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the &#34;FREAK&#34; issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.</p> <p>The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the &#34;FREAK&#34; issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0204 https://cve.radiocsirt.org/vuln/ghsa-ff55-77ff-xv8x <p>The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the &#34;FREAK&#34; issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.</p> <p>The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the &#34;FREAK&#34; issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.</p> https://cve.radiocsirt.org/vuln/ghsa-ff55-77ff-xv8x https://cve.radiocsirt.org/vuln/gsd-2015-0204 gsd-2015-0204 https://cve.radiocsirt.org/vuln/gsd-2015-0204 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 https://cve.radiocsirt.org/vuln/rhea-2015:0955 <p>openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK) mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages</p> <p>openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK) mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages</p> https://cve.radiocsirt.org/vuln/rhea-2015:0955 https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 <p>Security update for openssl1</p> <p>Security update for openssl1</p> https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0204 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openssl</p> <p>The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the &#34;FREAK&#34; issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openssl</p> <p>The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the &#34;FREAK&#34; issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0204 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0180