Lucene search
+L

3702 matches found

Veracode
Veracode
added 2025/12/13 4:30 a.m.28 views

Improper Certificate Validation

org.codehaus.mevenide, netbeans is vulnerable to improper certificate validation. The vulnerability is due to the autoupdate system failing to validate SSL certificates and hostnames for HTTPS-based downloads, which allows an attacker to intercept and modify autoupdate packages and potentially...

9.1CVSS8.4AI score0.02074EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/11/27 8:17 p.m.7 views

OPENSUSE-SU-2025-20113-1 Security update for dovecot24

This update for dovecot24 fixes the following issues: - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled bsc1252839 - Changes - auth: Remove proxyalways field. - config: Change settings history parsing to use python3. - doveadm: Print...

7.4CVSS6.9AI score0.0054EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/25 5:15 p.m.21 views

CVE-2025-63729

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO3.7L3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder...

9CVSS0.00087EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/25 5:15 p.m.15 views

CVE-2025-63729

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO3.7L3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder...

9CVSS5.8AI score0.00087EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:00 a.m.10 views

TencentOS Server 3: evolution (TSSA-2022:0095)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0095 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.1CVSS7AI score0.02808EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
added 2025/11/07 1:46 p.m.11 views

CVE-2025-56231

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections...

9.1CVSS6.9AI score0.00231EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/05 7:16 p.m.18 views

CVE-2025-56232

GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...

6.8CVSS0.00122EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2025/11/05 12:00 a.m.7 views

CVE-2025-56231

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections...

9.1CVSS6AI score0.00231EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/05 12:00 a.m.9 views

EUVD-2025-37933

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections...

9.1CVSS6.4AI score0.00231EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/05 12:00 a.m.28 views

CVE-2025-56231

Tonec Internet Download Manager (IDM) 6.42.41.1 and earlier is affected by a Missing SSL Certificate Validation vulnerability in the update mechanism, allowing a remote attacker to bypass update protections. Affected component is the update/SSL validation routine; root cause details are consisten...

9.1CVSS6.5AI score0.00231EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/11/04 12:00 a.m.11 views

Tencent Docs Desktop 安全漏洞

Tencent Docs Desktop is a multiplayer online collaborative document tool from Tencent China. A security vulnerability exists in Tencent Docs Desktop 3.9.20 and prior versions, which stems from a lack of SSL certificate validation in the update component...

7.5CVSS6.8AI score0.00216EPSS
SaveExploits1References2
NVD
NVD
added 2025/10/15 6:15 p.m.13 views

CVE-2025-62371

OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSearch sink and source plugins in Data Prepper trust all SSL certificates by default when no certificate path is provided. Prior to this fix, the OpenSearch sink and source plugin...

7.4CVSS0.00182EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2014-6574

Malware in sbrugna...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-5693

Malware in sbrugna...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2014-6826

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-7364

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-5662

Malware in sbrugna...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2000-0405

Malware in sbrugna...

2.6CVSS6.4AI score0.01025EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2014-7628

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-7197

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
Rows per page
Query Builder