91516 matches found
ALSA-2024:8842 Moderate: python3.12-urllib3 security update
urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: • Thread safety. • Connection pooling. • Client-side SSL/TLS verification. • File uploads with multipart encoding. • Helpers for retrying request...
CVE-2024-51774
A flaw was found in qBittorrent's DownloadManager component. This vulnerability allows remote code execution via improper validation of SSL/TLS certificates, enabling attackers to perform man-in-the-middle and RCE attacks...
RHEL 6 : python-django-horizon and python-django-openstack-auth update (Moderate) (RHSA-2015:0845)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:0845 advisory. OpenStack Dashboard horizon provides administrators and users a graphical interface to access, provision and automate cloud-based resources. The...
RHEL 6 : python-glanceclient (RHSA-2013:1200)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2013:1200 advisory. The python-glanceclient package provides a client for the OpenStack Glance API. It was discovered that the Python Glance client did not properly chec...
RHEL 6 / 7 : rh-mariadb100-mariadb (RHSA-2015:1646)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1646 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. It was found that the MySQL client...
RHEL 6 / 7 : postgresql92-postgresql (RHSA-2015:2083)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2083 advisory. PostgreSQL is an advanced object-relational database management system DBMS. A memory leak error was discovered in the crypt function of...
CVE-2024-44020
Missing Authorization vulnerability in Prasad Kirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS allows . This issue affects WP Free SSL – Free SSL Certificate for WordPress and force HTTPS: from n/a through 1.2.6...
CVE-2024-44020 WordPress WP Free SSL plugin <= 1.2.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Prasad Kirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS allows . This issue affects WP Free SSL – Free SSL Certificate for WordPress and force HTTPS: from n/a through 1.2.6...
CVE-2024-44020
The CVE CVE-2024-44020 concerns the WP Free SSL – Free SSL Certificate for WordPress and force HTTPS plugin (≤ 1.2.6). Affected software: WordPress plugin WP Free SSL, versions up to 1.2.6. Vulnerability type: Missing Authorization / Broken Access Control. Reported impact indicates unauthorized a...
CVE-2024-44020 WordPress WP Free SSL plugin <= 1.2.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in prasadkirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS wp-free-ssl.This issue affects WP Free SSL – Free SSL Certificate for WordPress and force HTTPS: from n/a through = 1.2.7...
WordPress plugin WP Free SSL 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-30149
HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...
SUSE-SU-2024:3844-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - Persist extracted key path for ldapsslclientinit over repeat invocations bsc1230852 - Re-enable use of .dsrc basedn for dsidm commands bsc1231462 - Update to version 2.2.10git18.20ce9289: RFE: Use previously extracted key path Update dsidm to...
CVE-2024-30149 HCL AppScan Source is affected by an expired TLS/SSL certificate
HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...
CVE-2024-30149 HCL AppScan Source is affected by an expired TLS/SSL certificate
HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...
CVE-2024-30149
CVE-2024-30149 affects HCL AppScan Source versions 10.6.0 and earlier, with a root cause of improper validation of a TLS/SSL certificate for an executable. Public sources consistently state the issue in the AppScan Source
Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy
CVE-2024-23113 The script is designed to detect CVE-2024-2311...
CVE-2019-25219
A flaw was found in the Asio C++ library. Asio lacks a fallback error code in the case of a SSLERRORSYSCALL with no associated error information from the SSL library being used...
AZL-52029 CVE-2019-25219 affecting package asio for versions less than 1.31.0-1
Asio C++ Library before 1.13.0 lacks a fallback error code in the case of SSLERRORSYSCALL with no associated error information from the SSL library being used...