Lucene search
+L

29086 matches found

NVD
NVD
•added 2023/11/16 6:15 p.m.•42 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS0.00307EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/16 6:15 p.m.•35 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS0.00301EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2023/11/16 6:15 p.m.•10 views

DEBIAN-CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.3AI score0.00307EPSS
SaveExploits0References1
osv_pysec
osv_pysec
•added 2023/11/16 6:15 p.m.•22 views

PYSEC-2023-242

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/16 6:15 p.m.•25 views

Design/Logic Flaw

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

4CVSS6.8AI score0.00307EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2023/11/16 6:15 p.m.•20 views

PYSEC-2023-243

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.8AI score0.00301EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/11/16 6:15 p.m.•24 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2023/11/16 6:15 p.m.•20 views

UBUNTU-CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/11/16 1:54 a.m.•14 views

SUSE CVE-2023-46121

yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an attacker setting an arbitrary proxy for a request to an arbitrary url, allowing the attacker to MITM the request made from yt-dlp's HTTP session. This could lead to cookie...

3.7CVSS7AI score0.00321EPSS
SaveExploits0References4
Mend
Mend
•added 2023/11/16 12:00 a.m.•10 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

9.1CVSS0.00301EPSS
SaveExploits0References6
Mend
Mend
•added 2023/11/16 12:00 a.m.•10 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

9.1CVSS0.00307EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
•added 2023/11/16 12:00 a.m.•88 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/11/16 12:00 a.m.•7 views

PT-2023-30684

Name of the Vulnerable Software and Affected Versions localstack version 2.3.2 Description The issue is related to missing SSL certificate validation, which allows attackers to intercept communications between the host and server through a man-in-the-middle attack. This enables attackers to...

7.4CVSS5.8AI score0.00301EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2023/11/16 12:00 a.m.•98 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.2AI score0.00307EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2023/11/16 12:00 a.m.•20 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

6.5AI score0.00307EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/11/16 12:00 a.m.•29 views

Bluetooth Core Specification Man-in-the-Middle Attack Vulnerability

Bluetooth is a popular wireless communication technology. A man-in-the-middle attack vulnerability exists in the Bluetooth Core Specification, which can be exploited by an attacker to compromise session authentication between Bluetooth devices, be able to force a short encryption key length using...

6.8CVSS6.5AI score0.01297EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/16 12:00 a.m.•4 views

CVE-2023-48052: Improper Certificate Validation

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.2AI score0.00307EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/16 12:00 a.m.•4 views

CVE-2023-48054: Improper Certificate Validation

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.2AI score0.00301EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/11/16 12:00 a.m.•31 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.2AI score
SaveExploits0References3
osv_cve
osv_cve
•added 2023/11/16 12:00 a.m.•27 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.5AI score
SaveExploits0References3
Rows per page
Query Builder