91602 matches found
Security Bulletin: A vulnerability in OpenSSL affects IBM Rational ClearQuest (CVE-2019-1551)
Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM Rational ClearQuest. IBM Rational ClearQuest has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-1551 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive informatio...
FortiMail Unauthenticated Login Bypass Scanner
This module attempts to detect instances of FortiMail vulnerable against an unauthenticated login bypass CVE-2020-9294. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FortiMail Unauthenticated...
Unspecified Vulnerability in J2 Global ThreatTrack VIPRE Password Vault app
J2 Global ThreatTrack VIPRE Password Vault app is a password manager from J2 Global USA. A security vulnerability exists in J2 Global ThreatTrack VIPRE Password Vault app 1.100.1090 and earlier versions iOS, which stems from the program's lack of SSL certificate validation. The vulnerability is...
Fedora: Security Advisory for gnutls (FEDORA-2020-76b705bb63)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for mingw-gnutls (FEDORA-2020-ea11cb5ccc)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Unspecified Vulnerability in Sophos Secure Email
Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. A security vulnerability exists in Sophos Secure Email 3.9.4 and earlier versions Android, which stems from a lack of SSL certificate validation in the program. The vulnerability can be...
Fedora: Security Advisory for mingw-gnutls (FEDORA-2020-4f78f122a3)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-14980
The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation...
CVE-2020-14981
The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation...
Input validation
The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation...
Design/Logic Flaw
The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation...
CVE-2020-14980
The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation...
CVE-2020-14980
Summary: CVE-2020-14980 affects Sophos Secure Email for Android up to version 3.9.4, due to missing SSL certificate validation. This can enable a forged certificate to compromise confidentiality during TLS. The vulnerability is described in multiple sources (NVD entry). The connected documents in...
CVE-2020-14981
The CVE-2020-14981 entry concerns the ThreatTrack VIPRE Password Vault app for iOS (up to version 1.100.1090). The connected documents confirm a root cause of Missing SSL Certificate Validation in the app, which can lead to exposure of sensitive information when connecting to servers that present...
CVE-2020-14981
The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation...
ssl.sagafoto.at Cross Site Scripting vulnerability OBB-1203336
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the SSL_check_chain function in the TLS protocol implementation of the OpenSSL library involves the possibility of reassigning the null pointer due to incorrect processing of the “signature_algorithms_cert” extension in TLS. This allows a perpetrator to cause a service failure.
The vulnerability of the SSLcheckchain function in the TLS protocol implementation of the OpenSSL library is related to the possibility of replacing the zero pointer due to incorrect processing of the “signaturealgorithmscert” extension in TLS. Exploiting this vulnerability can allow a malicious...
The vulnerability of the Montgomery quadradic multiplication algorithm implementation in OpenSSL libraries is related to an error in integer transfer on the x86_64 platform, which allows an attacker to gain unauthorized access to sensitive information.
The vulnerability of the Montgomery quadradic multiplication algorithm implementation in the OpenSSL library is related to an error in arithmetic operations on the x8664 platform. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to sensiti...
ssl.selesite.com Cross Site Scripting vulnerability OBB-1202486
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Nextcloud: SSL certificate not validated when registering with a provider
Description When running the desktop client for the first time, users can click the "Register with a provider" button to sign up for a Nextcloud account with a Nextcloud cloud provider. Clicking "Register..." opens a web page in a Nextcloud desktop client window with content from...