91545 matches found
Cisco Firepower Threat Defense Software SSL and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability
A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a logic error that occurs whe...
PT-2023-17412 · Cisco · Cisco Ftd
Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A logic error in the SSL file policy implementation of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cau...
CVE-2023-46604
A flaw was found in Apache ActiveMQ, specifically the OpenWire Module. This flaw may allow a remote malicious user to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol, causing the broker to instantiate any class on the classpath. This issue happens when...
CVE-2015-0897
LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...
CVE-2015-2968
LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...
Code injection
LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...
Code injection
LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...
CVE-2015-2968
LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...
CVE-2015-2968
LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...
CVE-2015-0897
LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...
GLSA-202310-22 : Salt: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202310-22 Salt: Multiple Vulnerabilities - An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege...
PT-2023-10315 · Line · Line For Android +1
Name of the Vulnerable Software and Affected Versions: LINE@ for Android version 1.0.0 LINE@ for iOS version 1.0.0 Description: The issue allows for a man-in-the-middle MITM attack due to the application's acceptance of non-SSL/TLS communications. This enables an attacker to invoke any API from a...
PT-2023-10184 · Line · Line For Android +1
Name of the Vulnerable Software and Affected Versions: LINE for Android versions 5.0.2 and earlier LINE for iOS versions 5.0.0 and earlier Description: The issue allows for a man-in-the-middle MITM attack because the application permits non-SSL/TLS communications. This enables an attacker to invo...
CVE-2023-47101
The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...
Privilege escalation
The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...
Securepoint SSL VPN Client Security Vulnerability
Securepoint SSL VPN Client is an open source SSL VPN client for Windows. A security vulnerability exists in Securepoint SSL VPN Client versions prior to 2.0.40 that stems from a local elevation of privilege vulnerability in the installer during installation or repair...
CVE-2023-47101
The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...
CVE-2023-47101
The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...
CVE-2023-47101
The CVE-2023-47101 vulnerability affects Securepoint SSL VPN Client: the installer (openvpn-client-installer) prior to version 2.0.40 allows local privilege escalation during installation or repair. Affected product: Securepoint SSL VPN Client; components: the installer used during setup/repair. ...
