Design/Logic Flaw

A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates...

CVE-2015-7542

A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates...

CVE-2015-7542

CVE-2015-7542 affects libgwenhywfar up to version 4.12.0, caused by the use of outdated bundled CA certificates. Multiple sources (NVD entry and downstream advisories) confirm the vulnerability exists due to trust store handling in the library. Exploitation details are not provided in the documen...

CVE-2015-7542: Cleartext Transmission of Sensitive Information

A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates...

SQL Injection Vulnerability in the ca***.php file of Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background ca.php file of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

Code injection

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

CVE-2014-2902

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

UBUNTU-CVE-2014-2902

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

CVE-2014-2902

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

CVE-2014-2902

CVE-2014-2902 affects wolfSSL prior to 3.2.0 and indicates a flaw where the library does not properly authorize a CA certificate for signing other certificates. The connected OSV/NVD entries confirm the same description across multiple ecosystems. The core issue is a lack of proper CA certificate...

CVE-2014-2902

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

PT-2019-7088

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 3.2.0 Description The issue is related to the improper authorization of CA certificates for signing other certificates. Recommendations For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issu...

CVE-2014-2902: Improper Certificate Validation

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

SQL injection vulnerability in the ca***.php file in the background of Yunye CMS (CNVD-2020-00234)

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background ca.php file of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

Mozilla Firefox ESR < 24.2 Multiple Vulnerabilities

Binary data 701241.prm...

PT-2019-6582

Name of the Vulnerable Software and Affected Versions Mercurial versions prior to 1.6.4 Description The issue allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack due to the failure to verify the Common Name field of SSL...

Thunderwind Movie CMS Aj***.php page ca*** parameter SQL injection vulnerability

Thunderwind CMS is a video-on-demand system developed using Thinkphp framework + Mysql to ensure the stability and efficiency of the program. Thunderwind Movie CMS Aj.php page ca parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database...

CVE-2019-13657

CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

CVE-2019-13657

CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

Design/Logic Flaw

CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...