Priority MEDIUM 55
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.41683 · Published 2016-09-26 · Partial fix CWE-125
Priority HIGH 71
The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) o…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.44218 · Published 2016-09-16 · Partial fix CWE-787
Priority HIGH 65
The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.37171 · Published 2016-07-04 · Partial fix · 1.3.2 CWE-20
Priority HIGH 71
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspec…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.44505 · Published 2016-06-20 · Partial fix CWE-190
Priority LOW 35
ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.13527 · Published 2015-12-06 · Partial fix CWE-362
Priority LOW 14
Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, IceWall SSO SAML2 Agent Option 8.0, IceWall SSO JAVA Agent Library 8.0 throug…
CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.01497 · Published 2013-09-23 · No fix listed
Priority LOW 19
Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00996 · Published 2013-09-23 · No fix listed
Priority LOW 29
Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, and IceWall File Manager 3.0 through SP4 allows remote attackers to obtain se…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03297 · Published 2013-09-23 · No fix listed
Priority LOW 27
Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02178 · Published 2013-09-23 · No fix listed