Lucene search
+L

91545 matches found

Cvelist
Cvelist
added 2023/11/20 12:3 p.m.23 views

CVE-2023-5593

The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain a privilege escalation by sending a crafted CREATE message...

7.8CVSS8AI score0.00216EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/20 12:3 p.m.79 views

CVE-2023-5593

CVE-2023-5593 concerns the Windows-based SecuExtender SSL VPN Client, version 4.0.4.0, where an out-of-bounds write in handling a CREATE message could allow an authenticated local user to escalate privileges. Root cause: a buffer/write bounds issue in the vulnerable component. Impact: local privi...

7.8CVSS7.7AI score0.00216EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/20 12:0 a.m.8 views

PT-2023-7535 · Unknown · Secuextender Ssl Vpn Client

Name of the Vulnerable Software and Affected Versions: SecuExtender SSL VPN Client version 4.0.4.0 Description: The issue is related to an out-of-bounds write vulnerability in the SecuExtender SSL VPN Client software. This vulnerability could allow an authenticated local user to gain privilege...

7.8CVSS7.9AI score0.00216EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/11/18 1:50 a.m.6 views

SUSE CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.9AI score0.00307EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/11/17 12:0 a.m.80 views

Fortinet FortiClient Hardcoding Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClien...

5.5CVSS7AI score0.00205EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/11/16 6:30 p.m.38 views

Missing SSL certificate validation in localstack

Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.7AI score0.00298EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/11/16 6:30 p.m.18 views

GHSA-8633-G3PH-97RP Missing SSL certificate validation in localstack

Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00298EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/11/16 6:30 p.m.29 views

HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7AI score0.00307EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2023/11/16 6:15 p.m.32 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS0.00307EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/16 6:15 p.m.5 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS5.8AI score0.00298EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/16 6:15 p.m.20 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS0.00298EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/16 6:15 p.m.20 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.5AI score
SaveExploits0References1
PyPA
PyPA
added 2023/11/16 6:15 p.m.8 views

PYSEC-2023-242

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.8AI score0.00307EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/11/16 6:15 p.m.19 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/16 6:15 p.m.18 views

Design/Logic Flaw

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

4CVSS6.8AI score0.00307EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/11/16 6:15 p.m.19 views

Design/Logic Flaw

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

4CVSS6.9AI score0.00298EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/11/16 6:15 p.m.14 views

UBUNTU-CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/16 6:15 p.m.10 views

PYSEC-2023-242

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
PyPA
PyPA
added 2023/11/16 6:15 p.m.11 views

PYSEC-2023-243

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.8AI score0.00298EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/16 12:0 a.m.16 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

6.5AI score0.00307EPSS
SaveExploits0References1
Rows per page
Query Builder