CVE-2024-30710

CVE-2024-30710 is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-31871: Improper Certificate Validation

IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle attack when deploying Python scripts due to improper certificate validation. IBM X-Force ID: 287306...

CVE-2024-30727

CVE-2024-30727 is rejected/not used; does not represent an active vulnerability entry.

CVE-2024-29445

This CVE entry is rejected and not used; it does not represent an active vulnerability entry.

PT-2024-3603

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM version 7.5 Description: The issue is related to improper certificate validation, which could allow an unauthorized user to perform unauthorized actions. This is also associated with errors in the authentication procedure of t...

ROS-20240410-20

A vulnerability in e-Tugra root certificates of SSL Certifi's SSL certificate validation package is related to with insufficient data authentication. Exploitation of the vulnerability could allow an attacker, acting remotely to execute a man-in-the-middle attack...

ROS-20240410-25

A vulnerability in e-Tugra root certificates of SSL Certifi's SSL certificate validation package is related to with insufficient data authentication. Exploitation of the vulnerability could allow an attacker, acting remotely to execute a man-in-the-middle attack...

CVE-2024-31872: Improper Certificate Validation

IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle attack when deploying Open Source scripts due to missing certificate validation. IBM X-Force ID: 287316...

PT-2024-24259

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access Appliance versions 10.0.0 through 10.0.7 Description The issue allows a malicious actor to conduct a man-in-the-middle attack when deploying Python scripts due to improper certificate validation. Recommendations For...

CVE-2024-30697

CVE-2024-30697 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30678

CVE-2024-30678 is rejected/not used and does not represent an active vulnerability entry.

PT-2024-23576 · Unknown · Ros2 Galactic Geochelone

Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions 2 Description: An issue was discovered where the system transmits messages in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack. Recommendations: For ROS2 Galactic...

CVE-2024-30662

CVE-2024-30662 is rejected/not used and does not represent an active vulnerability entry.

Cleartext Transmission Of Sensitive Information

dectalk-tts is vulnerable to Cleartext Transmission of Sensitive Information 'Man-in-the-Middle'. The vulnerability is due to unencrypted HTTP traffic being sent to a third-party API. This could allows an attacker to intercept and modify traffic, leading to potential man-in-the-middle MITM attack...

CVE-2024-31206

dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In [email protected], network requests to the third-party API are sent over HTTP, which is unencrypted. Unencrypted traffic can be easily intercepted and modified by attackers. Anyone who uses the package could be the victi...

CVE-2024-31206 Use of Unencrypted HTTP Request in dectalk-tts

dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In [email protected], network requests to the third-party API are sent over HTTP, which is unencrypted. Unencrypted traffic can be easily intercepted and modified by attackers. Anyone who uses the package could be the victi...

CVE-2024-31206 Use of Unencrypted HTTP Request in dectalk-tts

dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In [email protected], network requests to the third-party API are sent over HTTP, which is unencrypted. Unencrypted traffic can be easily intercepted and modified by attackers. Anyone who uses the package could be the victi...

CVE-2024-31206: Channel Accessible by Non-Endpoint

dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In [email protected], network requests to the third-party API are sent over HTTP, which is unencrypted. Unencrypted traffic can be easily intercepted and modified by attackers. Anyone who uses the package could be the victi...

Missing Certificate Validation

localstack is vulnerable to Missing Certificate Validation. An attacker can eavesdrop on communications between the host and server by performing a man-in-the-middle attack...

Westermo WeOS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2015-7547)

An attacker that successfully masquerade as an upstream DNS server may serve the WeOS device with malicious DNS query response that can allow the attacker full unauthorized access to the device. The glibc DNS client side resolver is vulnerable to a stack-based buffer overflow when the getaddrinfo...