CVE-2020-0543
- EPSS 0.48%
- Veröffentlicht 15.06.2020 14:15:11
- Zuletzt bearbeitet 21.11.2024 04:53:42
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2020-2830
- EPSS 0.22%
- Veröffentlicht 15.04.2020 14:15:29
- Zuletzt bearbeitet 21.11.2024 05:26:23
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthe...
CVE-2020-2781
- EPSS 0.26%
- Veröffentlicht 15.04.2020 14:15:27
- Zuletzt bearbeitet 21.11.2024 05:26:15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticate...
CVE-2019-3641
- EPSS 0.24%
- Veröffentlicht 13.11.2019 11:15:10
- Zuletzt bearbeitet 21.11.2024 04:42:17
Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.
CVE-2019-3738
- EPSS 0.97%
- Veröffentlicht 18.09.2019 23:15:11
- Zuletzt bearbeitet 21.11.2024 04:42:26
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable share...
CVE-2019-1559
- EPSS 5.05%
- Veröffentlicht 27.02.2019 23:29:00
- Zuletzt bearbeitet 21.11.2024 04:36:48
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid...
CVE-2018-6695
- EPSS 0.19%
- Veröffentlicht 03.10.2018 22:01:04
- Zuletzt bearbeitet 21.11.2024 04:11:06
SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment.