CVE-2019-1231

An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK Information Disclosure Vulnerability'...

NewStart CGSL CORE 5.05 / MAIN 5.05 : 389-ds-base Vulnerability (NS-SA-2019-0170)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has 389-ds-base packages installed that are affected by a vulnerability: - In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout'...

Rome SDK Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation. This vulnerability allows an unauthenticated attacker to establish connection with an invalid SSL/TLS server certificate. To exploit this, an attacker would have to Man-In-The-Middle ...

PT-2019-3203

Name of the Vulnerable Software and Affected Versions Project Rome SDK affected versions not specified Description The issue is related to errors in server SSL/TLS certificate validation. This could allow a remote attacker to gain unauthorized access to protected information. Recommendations At t...

CVE-2019-16179

Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration...

CVE-2019-16179

Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration...

Default configuration

Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration...

CVE-2019-16179

CVE-2019-16179 affects LimeSurvey prior to version 3.17.14, where the default configuration does not enforce SSL/TLS usage. The vulnerability arises from the software not requiring HTTPS by default, potentially allowing insecure communications. Public sources in the connected documents confirm th...

CVE-2019-16179

Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration...

CVE-2019-16179: Improper Certificate Validation

Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration...

PT-2019-14559

Name of the Vulnerable Software and Affected Versions Limesurvey versions prior to 3.17.14 Description The issue is related to the lack of enforcement of SSL/TLS usage in the default configuration. Recommendations For versions prior to 3.17.14, update to version 3.17.14 or later to resolve the...

CVE-2016-10931

An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification...

Design/Logic Flaw

An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification...

CVE-2016-10931

An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification...

CVE-2016-10931

An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification...

Security Bulletin: Vulnerability in OpenSSL affects IBM MQ Appliance (CVE-016-8610)

Summary There is a vulnerability in OpenSSL used by IBM MQ Appliance. IBM MQ Appliance has addressed the vulnerability. Vulnerability Details CVEID: CVE-2016-8610 DESCRIPTION: The SSL/TLS protocol is vulnerable to a denial of service, caused by an error when processing ALERT packets during a SSL...

NewStart CGSL MAIN 4.05 : java-1.8.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0146)

The remote NewStart CGSL host, running version MAIN 4.05, has java-1.8.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Sound. Supported versions that are affected are Ja...

NewStart CGSL MAIN 4.05 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0142)

The remote NewStart CGSL host, running version MAIN 4.05, has java-1.7.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Sound. Supported versions that are affected are Ja...

WAES - Auto Enums Websites And Dumps Files As Result

Doing HTB or other CTFs enumeration against targets with HTTPS can become trivial. It can get tiresome to always run the same script/tests on every box eg. nmap, nikto, dirb and so on. A one-click on target with automatic reports coming solves the issue. Furthermore, with a script the enum proces...

CVE-2019-1970

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol inspection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors...