4680 matches found
MongoDB Server 安全漏洞
MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . MongoDB Server suffers from a trust management issue vulnerability that stems...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: kine, src, k3s, step-ca, kots, argo-workflows, temporal-server, trillian, spicedb, step, caddy, amass, kube-bench, ferretdb...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: step-ca, kots, argo-workflows, trillian, step, caddy...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: k3s, step, ferretdb, temporal-server, kots, trillian, caddy, caddy-fips, temporal-server-fips, wavefront-collector-for-kubernetes, argo-workflows, falcosidekick-fips, trillian-fips, src, kube-bench-fips, amass, kube-bench, argo-workflows-fips, spicedb, step-ca, kine...
BIT-NODE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT
The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: terragrunt, crossplane, osv-scanner, crossplane-provider-aws-iam, trillian, node-problem-detector, kuberay-operator, nri-prometheus, prometheus-statsd-exporter-fips, supercronic, fulcio-fips, cass-operator, etcd, crossplane-provider-aws-s3, minio,...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: kine, src, k3s, step-ca, kots, argo-workflows, temporal-server, trillian, spicedb, step, caddy, amass, kube-bench, ferretdb...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: k3s, step, ferretdb, temporal-server, kots, trillian, caddy, caddy-fips, temporal-server-fips, wavefront-collector-for-kubernetes, argo-workflows, falcosidekick-fips, trillian-fips, src, kube-bench-fips, amass, kube-bench, argo-workflows-fips, spicedb, step-ca, kine...
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: k3s, step, ferretdb, temporal-server, kots, trillian, caddy, caddy-fips, temporal-server-fips, wavefront-collector-for-kubernetes, argo-workflows, falcosidekick-fips, trillian-fips, src, kube-bench-fips, amass, kube-bench, argo-workflows-fips, spicedb, step-ca, kine...
GHSA-M7WR-2XF7-CM9P vulnerabilities
Vulnerabilities for packages: trillian-fips, trillian, caddy, caddy-fips, argo-workflows-fips, wavefront-collector-for-kubernetes, step-ca, step, argo-workflows, kots...
Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates
Summary Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate . In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...
openSUSE: Security Advisory for ca (SUSE-SU-2023:0037-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for ca (SUSE-SU-2023:3454-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2024-1225 shim security update
Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate...
CVE-2024-0407
Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store...
Information disclosure
Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store...
CVE-2024-0407 Certain HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Information Disclosure
Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store...
CVE-2024-0407: Undefined Security Weakness
Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store...
CVE-2023-40104
In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40104
In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...