Lucene search
+L

581 matches found

Mageia
Mageia
added 2022/12/17 6:48 p.m.35 views

Updated python-slixmpp packages fix security vulnerability

Fixes missing certificate hostname validation...

7.5CVSS1.6AI score0.00473EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/12/15 12:00 a.m.44 views

Apache BookKeeper 信任管理问题漏洞

Apache BookKeeper is a scalable, fault-tolerant, and low-latency storage service optimized for real-time workloads from the Apache Foundation USA. A trust management issue vulnerability exists in the Apache Bookkeeper Java Client versions prior to 4.14.6 and prior to 4.15.0, which stems from a...

5.9CVSS5.9AI score0.01021EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/12/15 12:00 a.m.35 views

Zoom Client for Meetings < 5.10.0 Vulnerability (ZSB-22009)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.10.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-22009 advisory. - The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.10.0 fails to properly valida...

7.5CVSS7.7AI score0.03629EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/12/11 12:00 a.m.18 views

openSUSE 15 Security Update : python-slixmpp (openSUSE-SU-2022:10242-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10242-1 advisory. - Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS7.3AI score0.00473EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/10 11:01 p.m.6 views

OPENSUSE-SU-2022:10242-1 Security update for python-slixmpp

This update for python-slixmpp fixes the following issues: - CVE-2022-45197: Fixed certificate hostname validation boo1205433...

7.5CVSS7.5AI score0.00473EPSS
SaveExploits0References3
OSV
OSV
added 2022/11/15 8:15 p.m.16 views

CVE-2022-45391

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables SSL/TLS certificate and hostname validation for the entire Jenkins controller JVM...

7.5CVSS5.8AI score0.00422EPSS
SaveExploits0References2
NVD
NVD
added 2022/11/15 8:15 p.m.56 views

CVE-2022-38666

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.146 and earlier unconditionally disables SSL/TLS certificate and hostname validation for several features...

7.5CVSS0.00422EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/15 8:15 p.m.14 views

CVE-2022-38666

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.146 and earlier unconditionally disables SSL/TLS certificate and hostname validation for several features...

7.5CVSS5.8AI score0.00422EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/11/15 12:00 a.m.61 views

Jenkins NS-ND Integration Performance Publisher Plugin 信任管理问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A trust management issue...

7.5CVSS7.3AI score0.00422EPSS
SaveExploits0References7
CVE
CVE
added 2022/11/15 12:00 a.m.291 views

CVE-2022-45391

Affected product: Jenkins NS-ND Integration Performance Publisher Plugin (version 4.8.0.143 and earlier). Issue: plugin globally and unconditionally disables SSL/TLS certificate and hostname validation for the entire Jenkins controller JVM, undermining TLS trust and enabling potential interceptio...

7.5CVSS7.6AI score0.00422EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/15 12:00 a.m.8 views

CVE-2022-38666

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.146 and earlier unconditionally disables SSL/TLS certificate and hostname validation for several features...

6.8AI score0.00422EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/23 12:00 a.m.12 views

Apache Pulsar 信任管理问题漏洞

Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenancy, persistent storage, multi-machine room cross-region data replication...

5.9CVSS6.9AI score0.00623EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/22 12:00 a.m.46 views

GHSA-PXP5-G66H-WPV2 Missing hostname validation in Jenkins View26 Test-Reporting Plugin

Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections...

4.8CVSS7.9AI score0.0057EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/09/22 12:00 a.m.32 views

Missing hostname validation in Jenkins View26 Test-Reporting Plugin

Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections...

8.1CVSS8.1AI score0.0057EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/09/22 12:00 a.m.24 views

GHSA-7JWG-HQ85-C6M6 Jenkins SmallTest Plugin missing hostname validation

Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections. There is currently no known workaround or fix for this issue...

4.8CVSS7.9AI score0.0057EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/09/22 12:00 a.m.40 views

Jenkins SmallTest Plugin missing hostname validation

Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections. There is currently no known workaround or fix for this issue...

8.1CVSS8.1AI score0.0057EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/09/21 4:15 p.m.9 views

CVE-2022-41244

Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections...

8.1CVSS5.8AI score0.0057EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/21 4:15 p.m.25 views

CVE-2022-41244

Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections...

8.1CVSS0.0057EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/21 4:15 p.m.9 views

CVE-2022-41243

Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections...

8.1CVSS5.8AI score0.0057EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/21 4:15 p.m.35 views

CVE-2022-41243

Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections...

8.1CVSS0.0057EPSS
SaveExploits0References1
Rows per page
Query Builder