Vulnerabilities (CVE)

Filtered by CWE-310
Total 2484 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-4035 1 Ibm 1 Sterling Connect 2024-11-21 4.1 MEDIUM 7.3 HIGH
IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote attackers to have unspecified impact by leveraging failure to reject client requests for an unencrypted session when used as the server in a TCP/IP session and configured for SSL encryption with the client. IBM X-Force ID: 86138.
CVE-2013-3017 1 Ibm 1 Tivoli Application Dependency Discovery Manager 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Tivoli Application Dependency Discovery Manager (TADDM) before 7.2.1.5 and 7.2.x before 7.2.2 make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging support for weak SSL ciphers. IBM X-Force ID: 84353.
CVE-2011-4190 1 Suse 2 Suse Linux Enterprise Desktop, Suse Linux Enterprise Server 2024-11-21 3.5 LOW 5.9 MEDIUM
The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is similar to CVE-2011-3588, but different in that the kdump implementation is specific to SUSE. A remote malicious kdump server could use this flaw to impersonate the correct kdump server to obtain security sensitive information (kdump core files).
CVE-2024-38408 1 Qualcomm 470 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 467 more 2024-11-08 N/A 8.2 HIGH
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.