Lucene search
K

20 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-8367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for ...

4.8CVSS5.8AI score0.00021EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/13 6:30 p.m.1 views

EUVD-2026-30042

aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for a different purpose, they may be able to reuse it for TLS server authentication...

4.8CVSS5.8AI score0.00021EPSS
Exploits0References2
OSV
OSV
added 2026/05/13 4:17 p.m.1 views

DEBIAN-CVE-2026-8367

aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for a different purpose, they may be able to reuse it for TLS server authentication...

4.8CVSS5.8AI score0.00021EPSS
Exploits0References1
NVD
NVD
added 2026/05/13 4:17 p.m.4 views

CVE-2026-8367

aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for a different purpose, they may be able to reuse it for TLS server authentication...

4.8CVSS0.00021EPSS
Exploits0References1
OSV
OSV
added 2026/05/13 4:17 p.m.2 views

UBUNTU-CVE-2026-8367

aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for a different purpose, they may be able to reuse it for TLS server authentication...

4.8CVSS5.8AI score0.00021EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2026/05/13 4:17 p.m.3 views

CVE-2026-8367

aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for a different purpose, they may be able to reuse it for TLS server authentication...

4.8CVSS5.8AI score0.00021EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/13 2:55 p.m.23 views

CVE-2026-8367 aria2c Improper Certificate Validation

aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for a different purpose, they may be able to reuse it for TLS server authentication...

4.8CVSS0.00021EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/05/13 2:55 p.m.2 views

CVE-2026-8367

aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for a different purpose, they may be able to reuse it for TLS server authentication...

4.8CVSS5.8AI score0.00021EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.4 views

PT-2026-40700

aria2c accepts a server certificate with incorrect Extended Key Usage EKU. If the attackers compromise a certificate with the associated private key issued for a different purpose, they may be able to reuse it for TLS server authentication...

4.8CVSS5.8AI score0.00021EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/13 12:0 a.m.3 views

aria2c 信任管理问题漏洞

aria2c is a lightweight multi-protocol command-line download tool developed by aria2. Aria2c has a trust management vulnerability that stems from accepting server certificates with incorrect extension key purposes. This vulnerability could allow attackers to reuse certificates issued for differen...

4.8CVSS5.8AI score0.00021EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:17 a.m.2 views

SUSE CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

7.8CVSS7.2AI score0.0011EPSS
Exploits1References5
OSV
OSV
added 2019/01/02 7:29 a.m.17 views

CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

7.8CVSS6.1AI score
Exploits0References7
NVD
NVD
added 2019/01/02 7:29 a.m.11 views

CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

7.8CVSS7.4AI score0.0011EPSS
Exploits1References7
OSV
OSV
added 2019/01/02 7:29 a.m.0 views

DEBIAN-CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

7.8CVSS6.3AI score0.0011EPSS
Exploits1References1
Prion
Prion
added 2019/01/02 7:29 a.m.11 views

Default credentials

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

2.1CVSS7.2AI score0.0011EPSS
Exploits1References7Affected Software4
AlpineLinux
AlpineLinux
added 2019/01/02 7:0 a.m.33 views

CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

7.8CVSS7.4AI score0.0011EPSS
Exploits1
Cvelist
Cvelist
added 2019/01/02 7:0 a.m.15 views

CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

7.3AI score0.0011EPSS
Exploits1References7
Debian CVE
Debian CVE
added 2019/01/02 7:0 a.m.22 views

CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

7.8CVSS7.2AI score0.0011EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2019/01/02 12:0 a.m.19 views

CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

7.8CVSS7.1AI score0.0011EPSS
Exploits1References5
OSV
OSV
added 2019/01/02 12:0 a.m.0 views

UBUNTU-CVE-2019-3500

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file...

7.8CVSS7.1AI score0.0011EPSS
Exploits1References6
Rows per page
Query Builder