Lucene search
+L

292 matches found

Cvelist
Cvelist
added 2026/02/03 2:19 a.m.42 views

CVE-2026-24932 An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.

The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle MitM attack, whi...

8.9CVSS0.00206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.19 views

PT-2026-5764

The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle MitM attack, whi...

8.9CVSS5.5AI score0.00206EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.11 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002335 advisory. The ext4journalstop function in fs/ext4/ext4jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service use-after-free...

9.3CVSS6.6AI score0.01999EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/01/09 12:00 a.m.12 views

WordPress plugin BetterDocs 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An information...

6.5CVSS5.7AI score0.00334EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/07 9:29 a.m.20 views

CVE-2019-12437

In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,...

8.8CVSS6.9AI score0.00742EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:28 a.m.13 views

CVE-2019-12204

In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access...

9.8CVSS6.8AI score0.0146EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/13 3:02 a.m.11 views

CVE-2025-13052

When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle MITM attack, which may obtain the sensitive...

7CVSS6.8AI score0.00175EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/12 3:15 a.m.15 views

CVE-2025-13052

When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle MITM attack, which may obtain the sensitive...

7CVSS0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/12 2:46 a.m.5 views

CVE-2025-13053 A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM

When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic between the client and server can perform a man-in-the-middle MITM attack, which may obtain the sensitive information of th...

7CVSS6.2AI score0.00094EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/12 2:30 a.m.19 views

CVE-2025-13052

CVE-2025-13052 describes improper TLS/SSL certificate validation in ADM notifications when sending emails via msmtp, enabling potential MITM disclosure of SMTP data. Affected: ADM 4.1.0–4.3.3.RKD2 and 5.0.0–5.1.0.RN42. Root cause: TLS/SSL validation weakness between SMTP client and server. Impact...

7CVSS6.4AI score0.00175EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/12 12:00 a.m.13 views

PT-2025-50802

Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.RKD2 ADM versions 5.0.0 through 5.1.0.RN42 Description An improperly validated TLS/SSL certificate when sending emails to an SMTP server via msmtp allows an attacker intercepting network traffic to execute a...

7CVSS6.7AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-7240

Malware in sbrugna...

7.5CVSS7.6AI score0.03408EPSS
SaveExploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2002-0734

Malware in sbrugna...

10CVSS6.4AI score0.01498EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-0754

Malware in sbrugna...

5.3CVSS5.3AI score0.01369EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2002-0737

Malware in sbrugna...

10CVSS6.4AI score0.01498EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2002-0735

Malware in sbrugna...

10CVSS6.4AI score0.01498EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2002-0738

Malware in sbrugna...

10CVSS6.4AI score0.0184EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2010-4867

Malware in sbrugna...

7.5CVSS6.4AI score0.01144EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2016-1867

Malware in sbrugna...

6.1CVSS6.3AI score0.00924EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2004-2379

Malware in sbrugna...

10CVSS6.4AI score0.02145EPSS
SaveExploits1References7
Rows per page
Query Builder