Lucene search
+L

11983 matches found

Cvelist
Cvelist
added 2024/11/12 6:53 p.m.26 views

CVE-2024-40592

An improper verification of cryptographic signature vulnerability CWE-347 in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition...

7.5CVSS0.00132EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/12 1:15 p.m.20 views

CVE-2024-46889

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 3. The affected application uses hard-coded cryptographic key material to obfuscate configuration files. This could allow an attacker to learn that cryptographic key material through reverse engineering of the applicati...

6.9CVSS0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/12 12:49 p.m.10 views

CVE-2024-46889

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 3. The affected application uses hard-coded cryptographic key material to obfuscate configuration files. This could allow an attacker to learn that cryptographic key material through reverse engineering of the applicati...

6.9CVSS6.8AI score0.00293EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/12 12:49 p.m.65 views

CVE-2024-46889

CVE-2024-46889 affects Siemens SINEC INS (all versions

6.9CVSS6.9AI score0.00293EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/12 12:49 p.m.18 views

CVE-2024-46889

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 3. The affected application uses hard-coded cryptographic key material to obfuscate configuration files. This could allow an attacker to learn that cryptographic key material through reverse engineering of the applicati...

6.9CVSS0.00293EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/11/12 9:21 a.m.267 views

Moderate: Red Hat Security Advisory: libgcrypt security update

An update for libgcrypt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

5.9CVSS6.8AI score0.01114EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/12 3:15 a.m.24 views

CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS5.3AI score
SaveExploits0References2
NVD
NVD
added 2024/11/12 3:15 a.m.34 views

CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS0.00325EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/12 3:15 a.m.3 views

DEBIAN-CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS5.6AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 2:15 a.m.17 views

CVE-2024-49393

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

6.5CVSS7.4AI score
SaveExploits0References2
NVD
NVD
added 2024/11/12 2:15 a.m.29 views

CVE-2024-49393

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

6.5CVSS0.00327EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/11/12 2:07 a.m.55 views

CVE-2024-49394 Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS0.00325EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2024/11/12 2:07 a.m.46 views

CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS5.6AI score0.00325EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/11/12 2:07 a.m.21 views

CVE-2024-49394 Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS6.8AI score0.00325EPSS
SaveExploits0References5
CVE
CVE
added 2024/11/12 2:07 a.m.83 views

CVE-2024-49394

CVE-2024-49394 affects mutt and neomutt: the In-Reply-To header is not cryptographically signed, enabling an attacker to impersonate the sender by reusing an unencrypted but signed email. Public references in the connected documents show multiple advisories addressing this issue and releasing fix...

5.3CVSS5.1AI score0.00325EPSS
SaveExploits0References5Affected Software2
Cvelist
Cvelist
added 2024/11/12 1:55 a.m.43 views

CVE-2024-49393 Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

6.5CVSS0.00327EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/11/12 1:55 a.m.23 views

CVE-2024-49393 Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

6.5CVSS6.8AI score0.00327EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2024/11/12 1:55 a.m.64 views

CVE-2024-49393

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality...

6.5CVSS7.3AI score0.00327EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/11/12 12:00 a.m.5 views

PT-2024-33505

Name of the Vulnerable Software and Affected Versions mutt and neomutt affected versions not specified Description The issue concerns the In-Reply-To email header field in mutt and neomutt, which is not protected by cryptographic signing. This allows an attacker to reuse an unencrypted but signed...

6.5CVSS6.5AI score0.03317EPSS
SaveExploits0References49
OSV
OSV
added 2024/11/12 12:00 a.m.13 views

ALSA-2024:9404 Moderate: libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: libgcrypt: vulnerable to Marvin Attack CVE-2024-2236 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

5.9CVSS7.3AI score0.01114EPSS
SaveExploits0References4
Rows per page
Query Builder