Lucene search
+L

3701 matches found

Vulnrichment
Vulnrichment
added 2019/08/21 6:30 p.m.11 views

CVE-2019-1948 Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability

A vulnerability in Cisco Webex Meetings Mobile iOS could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer SSL certificate. The vulnerability is due to insufficient SSL certificate validation by the affected...

5.9CVSS6.5AI score0.0087EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/08/21 6:30 p.m.28 views

CVE-2019-1948 Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability

A vulnerability in Cisco Webex Meetings Mobile iOS could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer SSL certificate. The vulnerability is due to insufficient SSL certificate validation by the affected...

5.9CVSS5.5AI score0.0087EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/08/21 4:00 p.m.109 views

Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability

A vulnerability in Cisco Webex Meetings Mobile iOS could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer SSL certificate. The vulnerability is due to insufficient SSL certificate validation by the affected...

5.9CVSS5.6AI score0.0087EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/08/13 1:36 p.m.22 views

CVE-2019-14516

The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks against requests for FAQs or Help...

7.3AI score0.0072EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:00 a.m.38 views

NewStart CGSL MAIN 5.04 : python Multiple Vulnerabilities (NS-SA-2019-0008)

The remote NewStart CGSL host, running version MAIN 5.04, has python packages installed that are affected by multiple vulnerabilities: - Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service application crash an...

7.5CVSS7.7AI score0.14643EPSS
SaveExploits9References7
OSV
OSV
added 2019/08/06 2:15 p.m.8 views

CVE-2016-10797

cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains SEC-133...

4.3CVSS5.8AI score0.0049EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/06 2:15 p.m.20 views

Design/Logic Flaw

cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains SEC-133...

4CVSS7.1AI score0.0049EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/06 1:08 p.m.31 views

CVE-2016-10797

cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains SEC-133...

4.7AI score0.0049EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/05 1:15 p.m.22 views

Design/Logic Flaw

In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address SEC-209...

4CVSS6.5AI score0.00471EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/08/01 2:15 p.m.17 views

CVE-2019-3890

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference...

8.1CVSS6.2AI score
SaveExploits0References3
Cvelist
Cvelist
added 2019/08/01 1:22 p.m.33 views

CVE-2019-3890

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference...

8.1CVSS6.2AI score0.0099EPSS
SaveExploits0References3
CVE
CVE
added 2019/08/01 1:22 p.m.288 views

CVE-2019-3890

CVE-2019-3890 affects evolution-ews in Evolution Data Server (before 3.31.3). The flaw: SSL certificate validity is not checked, enabling an attacker to trick users into connecting to a fake server and obtain confidential information. Multiple Nessus entries reference this CVE within various Linu...

8.1CVSS6.1AI score0.0099EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2019/08/01 1:15 p.m.8 views

CVE-2019-14334

An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP command...

5.5CVSS6.1AI score0.0043EPSS
SaveExploits3References3
OSV
OSV
added 2019/07/30 3:15 p.m.10 views

CVE-2019-14399

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

7.1CVSS7.1AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
added 2019/07/30 3:15 p.m.28 views

CVE-2019-14399

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

7.1CVSS7AI score0.00264EPSS
SaveExploits0References1
Prion
Prion
added 2019/07/30 3:15 p.m.24 views

Design/Logic Flaw

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

6.1CVSS6.9AI score0.00264EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/07/30 2:07 p.m.29 views

CVE-2019-14399

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

7AI score0.00264EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/23 2:15 p.m.20 views

CVE-2019-1010206

OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...

5.9CVSS6.9AI score
SaveExploits0References1
NVD
NVD
added 2019/07/23 2:15 p.m.29 views

CVE-2019-1010206

OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...

5.9CVSS5.8AI score0.0057EPSS
SaveExploits0References1
Prion
Prion
added 2019/07/23 2:15 p.m.17 views

Design/Logic Flaw

OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...

4.3CVSS5.8AI score0.0057EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder