CVE-2023-0465: Improper Certificate Validation

Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that...

PT-2023-21050 · Ibm · Ibm Aspera Connect +1

Name of the Vulnerable Software and Affected Versions: IBM Aspera Cargo version 4.2.5 IBM Aspera Connect version 4.2.5 Description: The issue is caused by improper bounds checking, leading to a buffer overflow. An attacker could exploit this to execute arbitrary code on the system. Recommendation...

OpenSSL Trust Management Vulnerability

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

Mozilla: Potential out-of-bounds when accessing throttled streams

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that when accessing throttled streams, the count of available bytes needs to be checked in the calling function to be within bounds. This may have led future code to be incorrect and vulnerable...

Apiman security vulnerabilities

Apiman is Apiman open source a flexible open source API management platform for enterprise users. A security vulnerability exists in versions prior to Apiman 3.1.0.Final that stems from a lack of permission checking. Attackers exploiting the vulnerability were able to access API keys to which the...

openSUSE 15 Security Update : libgit2 (SUSE-SU-2023:1570-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:1570-1 advisory. - CVE-2023-22742: Fixed SSH keys verification failure bsc1207364. Tenable has extracted the preceding description block directly from the SUSE security...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from incorrect boundary checking and possible out-of-bounds writes...

Google Pixel security vulnerabilities

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a lack of permission checking and possible permission bypass...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

Google Pixel: Input validation vulnerability

Google Pixel is a smartphone from Google Inc USA. Google Pixel suffers from an input validation error vulnerability that stems from a lack of bounds checking and possible out-of-bounds writes...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

Google Pixel security vulnerabilities

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a lack of permission checking and possible permission bypass...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...