28947 matches found
PT-2025-28228 · Ibm · Ibm Engineering Requirements Management Doors
Name of the Vulnerable Software and Affected Versions: IBM Engineering Requirements Management DOORS version 9.7.2.9 Description: The issue allows a remote attacker to obtain password reset instructions of a legitimate user using man-in-the-middle techniques under certain configurations...
CVE-2024-43190: Weak Password Recovery Mechanism for Forgotten Password
IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques...
CVE-2025-34066
An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle MITM attacks...
CVE-2025-45080
YONO SBI: Banking & Lifestyle v1.23.36 was discovered to use unencrypted communicatons, possibly allowing attackers to execute a man-in-the-middle attack...
podman: podman missing TLS verification
A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack...
CVE-2025-45080
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2025-34066
An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle MITM attacks...
CVE-2025-34066
CVE-2025-34066 affects AVTECH IP cameras, DVRs, and NVRs. The root cause is improper certificate validation caused by using wget with --no-check-certificate in scripts such as SyncCloudAccount.sh and SyncPermit.sh, exposing HTTPS communications to MITM attacks. Affected products are AVTECH device...
CVE-2025-34066 AVTECH IP camera, DVR, and NVR Devices Unauthenticated Information Disclosure
An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle MITM attacks...
CVE-2025-45080
CVE-2025-45080 is linked to YONO SBI: Banking & Lifestyle v1.23.36, with the root cause described as use of unencrypted communications that could allow a man-in-the-middle attack. Multiple sources confirm the affected product and issue, noting the risk of intercepted data via MITM. The provided d...
CVE-2025-34066: Improper Certificate Validation
An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle MITM attacks...
PT-2025-27545 · Avtech +1 · Avtech Ip Cameras +3
Name of the Vulnerable Software and Affected Versions: AVTECH IP cameras, DVRs, and NVRs affected versions not specified Description: An improper certificate validation issue exists due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This...
PT-2025-27567
Name of the Vulnerable Software and Affected Versions: YONO SBI: Banking & Lifestyle version 1.23.36 Description: The issue is related to the use of unencrypted communications, which could potentially allow attackers to execute a man-in-the-middle attack. Recommendations: For YONO SBI: Banking &...
Hitachi Energy MicroSCADA X SYS600 Man-in-the-Middle
The vulnerability of the IEC 61850 client of the Hitachi Energy MicroSCADA X SYS600 system management and control software is related to errors in the TLS certificate validation process. Exploiting this vulnerability could allow an attacker to carry out a “man-in-the-middle” attack...
FreeBSD : podman -- TLS connection used to pull VM images was not validated (6b1b8989-55b0-11f0-ac64-589cfc10a551)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6b1b8989-55b0-11f0-ac64-589cfc10a551 advisory. RedHat, Inc. reports: A flaw was found in Podman. The podman machine init command fails to verify the T...
podman -- TLS connection used to pull VM images was not validated
RedHat, Inc. reports: A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack...
PT-2026-37183
Name of the Vulnerable Software and Affected Versions Net::IMAP versions prior to 0.3.10 Net::IMAP versions prior to 0.4.24 Net::IMAP versions prior to 0.5.14 Net::IMAP versions prior to 0.6.4 Description A man-in-the-middle attacker can cause the starttls function to return successfully without...
Security Bulletin: IBM Storage Ceph is vulnerable to Channel Accessible by Non-Endpoint in the RHEL UBI (CVE-2023-7008)
Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. CVE-2023-7008 This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. Vulnerability Details CVEID:CVE-2023-7008 DESCRIPTION: systemd is vulnerable to a man-in-the-middle attack, caused by a...