4652 matches found
CVE-2022-35646
IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using man-in-the-middle techniques. IBM X-Force ID: 231096...
CVE-2023-43017
IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file that could allow remote access. IBM X-Force ID: 266155...
CVE-2023-4102
QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...
CVE-2025-67858
A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating the JSON configuration passed to nft. This issue affects Foomuuri: from ? before 0.31...
wolfSSL Python module vulnerable to Improper Authentication
A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced. Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...
CVE-2025-15346
A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced. Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...
Malicious Package
Overview meta-code-verify is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-15346
The wolfssl-py Python package is affected by CVE-2025-15346 due to improper enforcement of client certificate requirements when verify_mode is CERT_REQUIRED. The root cause is failure to include WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT, making behavior effectively CERT_OPTIONAL: a peer certificate is ...
CVE-2025-15346 wolfSSL Python library `CERT_REQUIRED` mode fails to enforce client certificate requirement
A vulnerability in the handling of verifymode = CERTREQUIRED in the wolfssl Python package wolfssl-py causes client certificate requirements to not be fully enforced. Because the WOLFSSLVERIFYFAILIFNOPEERCERT flag was not included, the behavior effectively matched CERTOPTIONAL: a peer certificate...
Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Vulnerability Details CVEID:CVE-2024-12243 DESCRIPTION: A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1,...
Improper Control of Interaction Frequency
Overview django-phone-verify is an A Django app to support phone number verification using security code sent via SMS. Affected versions of this package are vulnerable to Improper Control of Interaction Frequency due to the absence of failed attempt tracking and lockout mechanisms in the...
PT-2025-53939
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's SUNRPC implementation. Specifically, a memory leak can occur within the gss read proxy verf function when processing network object netobj data. This...
The vulnerability of the verify_field_val() function in the Integration for Contact Forms and Google Sheets plugin of the WordPress content management system allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the verifyfieldval function in the Integration for Contact Forms and Google Sheets plugin of the WordPress content management system is related to deserialization mechanism flaws. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause...
Exploit for CVE-2025-68613
🚀 n8n Authenticated RCE PoC Pocsuite3 CVE ID: CVE-202...
Malicious code in meta-code-verify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe9ef66b25262f4d7762d8eb0da5f1eb463ee0dce0e8c8a381afafafc7ac364 The package meta-code-verify was found to contain malicious code. Source: ghsa-malware 20e17f2a738903ebfbb0686c72b499a7788fb35d071f3a6d2abf01b71204cb...
MAL-2026-134 Malicious code in meta-code-verify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe9ef66b25262f4d7762d8eb0da5f1eb463ee0dce0e8c8a381afafafc7ac364 The package meta-code-verify was found to contain malicious code. Source: ghsa-malware 20e17f2a738903ebfbb0686c72b499a7788fb35d071f3a6d2abf01b71204cb...
FreeBSD : traefik -- Inverted TLS Verification Logic in Kubernetes NGINX Provider (dc7e30db-de67-11f0-b893-5404a68ad561)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the dc7e30db-de67-11f0-b893-5404a68ad561 advisory. The traefik project reports: There is a potential vulnerability in Traefik NGINX provider managing the...
Security Bulletin:Vulnerability in OpenSSH affects IBM Netezza Appliance
Summary The OpenSSH package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-26465 Vulnerability Details CVEID:CVE-2025-26465 DESCRIPTION: A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle...
Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Vulnerability Details CVEID:CVE-2025-50106 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE...
Security Bulletin: Security vulnerabilities have been discovered in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Vulnerability Details CVEID:CVE-2025-7962 DESCRIPTION: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate differe...