Filter
AND
AND
OpenSSL libcryptoThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CB…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject Fedorapacket.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash pa…
5.9
First published (updated )
Debian Debian LinuxThe mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and au…
5.9
First published (updated )
NumPy NumPy(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/te…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ubuntu Linuxbdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial su…
First published (updated )
Ubuntu LinuxMozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey be…
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
json-cThe hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of…
First published (updated )
Red Hat LibvirtThe LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete ar…
5.8
First published (updated )
Ubuntu LinuxMozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute…
4.3
First published (updated )
Mozilla FirefoxMozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which …
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
duckcorp BipBip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descri…
5.1
First published (updated )
Fedoraproject FedoraReview Board: URL processing gives unauthorized users access to review lists
4.3
First published (updated )
Ubuntu LinuxOpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does …
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.