Nextcloud Mail Trust Management Issue Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A trust management issue vulnerability exists in Nextcloud Mail version 1.1.3, which stems from a lack of authentication to a TLS host. An attacker could...

Design/Logic Flaw

A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack...

CVE-2020-8156: Improper Certificate Validation

A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack...

Code injection

The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures. However, there is no benefit to using DTLS without the peer checking. See NCC-ZEP-018 This issue affects: zephyrproject-rtos zephyr versi...

Wifipumpkin3 - Powerful Framework For Rogue Access Point Attack

wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle attack. Main Features Rogue access point attack Man-in-the-middle attack...

Debian DSA-4680-1 : tomcat9 - security update

Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling, code execution in the AJP connector disabled by default in Debian or a man-in-the-middle attack against the JMX interface. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2020-2185

CVE-2020-2185 – Jenkins Amazon EC2 Plugin : Affects Jenkins Amazon EC2 Plugin versions 1.50.1 and earlier. The issue is a lack of SSH host key validation when connecting agents, enabling potential man‑in‑the‑middle attacks. The connected Red Hat, OSV, GHSA, CNVD, and other entries corroborate the...

Buffer overflow

A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to hold it. Mitigation: Update to Google Earth P...

CVE-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1 Mitigation Previous...

PT-2020-20357

Name of the Vulnerable Software and Affected Versions Google Earth Pro versions up to and including 7.3.2 Description A Buffer Overflow issue in the khcrypt implementation allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffe...

CVE-2020-11024 Man-in-the-middle attack in Moonlight iOS/tvOS

In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvOS...

CVE-2020-11024

In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvOS...

CVE-2020-11024

CVE-2020-11024 concerns Moonlight on iOS/tvOS prior to 4.0.1, where the pairing process is vulnerable to a man-in-the-middle attack. The issue is fixed in Moonlight v4.0.1 for iOS and tvOS. Connected documents consistently describe the affected product as Moonlight iOS/tvOS and identify the root ...

CVE-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1...

CVE-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1...

CVE-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1...

CVE-2020-12105

OpenConnect (affected: 8.08 and related, e.g., OpenConnect through 8.08) is vulnerable due to mishandling negative return values from X509_check_ function calls, which could enable MITM attacks. Root cause: improper handling in X509-related checks; impact: potential eavesdropping/mitigation failu...

SMACom 1.2.0 Insecure Transit / Password Disclosure

Document Title: =============== SMACom v1.2.0 - Insecure Session Validation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2211 Release Date: ============= 2020-04-16 Vulnerability Laboratory ID VL-ID: ====================================...

EulerOS Virtualization 3.0.2.2 : ntp (EulerOS-SA-2020-1457)

According to the versions of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NTP through 4.2.8p12 has a NULL Pointer Dereference.CVE-2019-8936 - ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before...

Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2020-1438)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...