https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:26:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00661 bdu:2016-00661 https://cve.radiocsirt.org/vuln/bdu:2016-00661 https://cve.radiocsirt.org/vuln/certfr-2016-avi-076 certfr-2016-avi-076 https://cve.radiocsirt.org/vuln/certfr-2016-avi-076 https://cve.radiocsirt.org/vuln/cnvd-2016-01367 cnvd-2016-01367 https://cve.radiocsirt.org/vuln/cnvd-2016-01367 https://cve.radiocsirt.org/vuln/euvd-2026-81618 EUVD-2026-81618 https://cve.radiocsirt.org/vuln/euvd-2026-81618 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0800 <p>The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a &#34;DROWN&#34; attack.</p> <p>The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a &#34;DROWN&#34; attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0800 https://cve.radiocsirt.org/vuln/ghsa-fqw2-3v24-gc79 <p>The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a &#34;DROWN&#34; attack.</p> <p>The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a &#34;DROWN&#34; attack.</p> https://cve.radiocsirt.org/vuln/ghsa-fqw2-3v24-gc79 https://cve.radiocsirt.org/vuln/gsd-2016-0800 gsd-2016-0800 https://cve.radiocsirt.org/vuln/gsd-2016-0800 https://cve.radiocsirt.org/vuln/icsa-16-103-03c <p>The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a &#34;DROWN&#34; attack.</p> <p>The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a &#34;DROWN&#34; attack.</p> https://cve.radiocsirt.org/vuln/icsa-16-103-03c https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 https://cve.radiocsirt.org/vuln/rhsa-2016:0302 <p>OpenSSL: SSLv2 doesn&#39;t block disabled ciphers OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)</p> <p>OpenSSL: SSLv2 doesn&#39;t block disabled ciphers OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0302 https://cve.radiocsirt.org/vuln/suse-su-2016:0617-1 <p>Security update for openssl</p> <p>Security update for openssl</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0617-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0427 <p>Ein anonymer, lokaler bzw. entfernter Angreifer kann mehrere Schwachstellen in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server EUS, Red Hat Enterprise Linux Workstation, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux Server AUS, Arista EOS und Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen, beliebigen Programcode mit den Rechten des Dienstes auszuführen oder um einen Denial of Service Zustand herbeizuführen.</p> <p>Ein anonymer, lokaler bzw. entfernter Angreifer kann mehrere Schwachstellen in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server EUS, Red Hat Enterprise Linux Workstation, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux Server AUS, Arista EOS und Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen, beliebigen Programcode mit den Rechten des Dienstes auszuführen oder um einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0427