91811 matches found
Cisco FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability (cisco-sa-20190710-asa-ftd-dos)
According to its self-reported version, Adaptive Security Appliance Software with FirePOWER Services is affected by a vulnerability in the cryptographic driver due to incomplete input validation of a Secure Sockets Layer SSL or Transport Layer Security TLS ingress packet header. An unauthenticate...
Exploit for Cleartext Transmission of Sensitive Information in Oneidentity Cloud_Access_Manager
CVE-2019-13498 Exploit Title: MITM - Missing HSTS causing cre...
CVE-2017-18460
cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation SEC-221...
CVE-2017-18445
cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls SEC-249...
Code injection
cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation SEC-221...
Code injection
cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls SEC-249...
CVE-2017-18460
CVE-2017-18460 affects cPanel before 62.0.17, where the automatic SSL installation process allows arbitrary code execution (SEC-221). Affected: cPanel (pre-62.0.17). Root cause: vulnerability in SSL installation flow enabling code execution. Impact: arbitrary code execution with HIGH severity (pe...
CVE-2017-18460
cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation SEC-221...
CVE-2017-18445
CVE-2017-18445 affects cPanel prior to 64.0.21. The issue is that SSL API calls could bypass demo restrictions, as described in SEC-249. The available connected documents confirm the product/version and the nature of the vulnerability but do not provide exploits, in-the-wild details, or explicit ...
CVE-2017-18445
cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls SEC-249...
CVE-2017-18429
In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination SEC-291...
Design/Logic Flaw
In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination SEC-291...
CVE-2017-18429
In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination SEC-291...
CVE-2017-18429
CVE-2017-18429 affects cPanel before 66.0.2. The issue is that Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291). Several connected sources corroborate the same description, without detailing root cause, exploited vectors, or remediation steps in the pr...
CVE-2017-18407
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
CVE-2017-18395
cPanel before 68.0.15 does not block a username of ssl SEC-328...
Design/Logic Flaw
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
CVE-2017-18407
CVE-2017-18407 affects cPanel before 67.9999.103, where SSL hostname verification is not enforced for the support‑agreement download (SEC-279). This is the concrete vulnerability described across multiple connected records. The available documents do not provide exploit details, impact specifics ...