Lucene search
+L

3728 matches found

Debian
Debian
added 2021/03/13 6:57 p.m.159 views

[SECURITY] [DLA 2593-1] ca-certificates whitelist Symantec CA

----------------------------------------------------------------------- Debian LTS Advisory DLA-2593-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 14, 2021 https://wiki.debian.org/LTS -...

6.8AI score
SaveExploits0
Symantec
Symantec
added 2021/03/09 7:16 p.m.131 views

OpenSSL Vulnerabilities Sep 2020 - Feb 2021

Summary Symantec Network and Information Security NIS products using affected versions of OpenSSL may be susceptible to multiple vulnerabilities. A remote attacker may be able to decrypt encrypted communication from an SSL/TLS connection, downgrade a newly established SSL/TLS connection to SSLv2,...

5CVSS0.4AI score0.50732EPSS
SaveExploits3Affected Software16
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.12 views

Huawei EulerOS: Security Advisory for NetworkManager (EulerOS-SA-2021-1529)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.1AI score0.00983EPSS
SaveExploits0References2
Cloud Foundry
Cloud Foundry
added 2021/02/23 12:0 a.m.15 views

USN-4719-1: ca-certificates update | Cloud Foundry

Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.46 version of the Mozilla certificate authority bundle...

7AI score
SaveExploits0Affected Software3
OpenVAS
OpenVAS
added 2021/02/22 12:0 a.m.31 views

Huawei EulerOS: Security Advisory for pki-core (EulerOS-SA-2021-1346)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.8AI score0.87218EPSS
SaveExploits4References2
CNVD
CNVD
added 2021/02/19 12:0 a.m.5 views

SQL injection vulnerability in the ca***.asp page of the website building system of Ningbo Yilong Computer Technology Co.

Ningbo YiLong Computer Technology Co., Ltd. is a design and build enterprise focusing on enterprise website platform, government school, home service and other industries. There is a SQL injection vulnerability in the ca.asp page of the website builder system of Ningbo Yilong Computer Technology ...

8.1AI score
SaveExploits0
OSV
OSV
added 2021/02/12 10:37 a.m.7 views

SUSE-SU-2021:0448-1 Security update for SUSE Manager Server 4.0

This update fixes the following issues: cpu-mitigations-formula: - Handle unsupported target systems gracefully bsc1179273 - add mitigations for Xen hypervisor nutch-core: - Fix XXE injection in DmozParser CVE-2021-23901 bsc1181356 smdba: - Do not remove the database if there is no backup and dea...

9.1CVSS9.5AI score0.04359EPSS
SaveExploits0References30
Cloud Foundry
Cloud Foundry
added 2021/02/10 12:0 a.m.14 views

USN-4608-1: ca-certificates update | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.44 version of the Mozilla certificate...

7AI score
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/05 12:14 a.m.11 views

Security Bulletin: The Ubuntu ca-certificates have been updated in Watson Machine Learning Community Edition containers due to expiration.

Summary Ubuntu ca-certficates expire occasionally and need to be updated. The Ubuntu based containers for Watson Machine Learning Community Edition have been updated to recent ca-certificates. Vulnerability Details Third Party Entry: 192370 DESCRIPTION: ca-certificates package for Ubuntu spoofing...

0.7AI score
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2021/02/03 12:0 a.m.11 views

Ubuntu: Security Advisory (USN-4719-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/02/03 12:0 a.m.18 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ca-certificates update (USN-4719-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4719-1 advisory. The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the...

5.6AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2021/02/02 5:58 p.m.109 views

USN-4719-1: ca-certificates update

The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.46 version of the Mozilla certificate authority bundle...

5.4AI score
SaveExploits0References1
Citrix
Citrix
added 2021/01/27 12:0 a.m.10 views

CWA for Android: Fail to Launch Apps and Desktops

Applications are enumerated correct, But when you try launch Apps it fails to connect. Error logged during launch is "javax.net.ssl.SSLPeerUnverifiedException: Check that all CAs are compliant and are installed properly" Full trace ======= "2021-01-20T06:57:18.559+0530","TCPSocketFactory","INFO...

7.2AI score
SaveExploits0
NVD
NVD
added 2021/01/20 8:15 p.m.55 views

CVE-2020-27858

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getNews method. Due to the improper restriction of XML External Entity...

7.5CVSS7.3AI score0.73828EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/20 8:15 p.m.19 views

Xxe

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getNews method. Due to the improper restriction of XML External Entity...

5CVSS7.4AI score0.73828EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/20 7:35 p.m.38 views

CVE-2020-27858

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getNews method. Due to the improper restriction of XML External Entity...

7.5CVSS7.4AI score0.73828EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/20 7:35 p.m.43 views

CVE-2020-27858

CVE-2020-27858 affects CA Arcserve D2D 16.5. A flaw in the getNews method arises from improper restriction of XML External Entity (XXE) references, allowing remote attackers to disclose sensitive information in the context of SYSTEM without authentication. The exploitation path is via a crafted X...

7.5CVSS7.3AI score0.73828EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/01/15 2:15 p.m.8 views

UBUNTU-CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

7.5CVSS7.1AI score0.01153EPSS
SaveExploits0References3
NVD
NVD
added 2021/01/05 6:15 p.m.41 views

CVE-2020-29478

CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition...

7.5CVSS7.4AI score0.01165EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/01/05 5:24 p.m.27 views

CVE-2020-29478

CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition...

7.4AI score0.01165EPSS
SaveExploits0References1
Rows per page
Query Builder