Lucene search
+L

3728 matches found

Openbugbounty
Openbugbounty
added 2020/09/01 1:14 p.m.14 views

gardencommunitiesca.com Cross Site Scripting vulnerability OBB-1293533

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
NVD
NVD
added 2020/08/20 11:15 p.m.30 views

CVE-2020-12619

MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enabled the...

5.9CVSS5.4AI score0.00429EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/20 11:15 p.m.7 views

CVE-2020-12619

MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enabled the...

5.9CVSS6.2AI score0.00429EPSS
SaveExploits0References2
Prion
Prion
added 2020/08/20 11:15 p.m.21 views

Code injection

MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enabled the...

4.3CVSS5.4AI score0.00429EPSS
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
added 2020/08/20 5:22 p.m.8 views

yg1.ca Cross Site Scripting vulnerability OBB-1267807

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
AlmaLinux
AlmaLinux
added 2020/08/10 8:54 a.m.18 views

ca-certificates bug fix and enhancement update

The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure PKI. Bug Fixes and Enhancements: Annual AlmaLinux 8 ca-certificates update 2020 to nss 3.53 for Firefox 78 BZ1849732 circular...

7AI score
SaveExploits0
Rockylinux
Rockylinux
added 2020/08/10 8:54 a.m.14 views

ca-certificates bug fix and enhancement update

An update is available for ca-certificates. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ca-certificates package contains a set of Certificate Authority C...

1.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/08/02 8:9 p.m.44 views

yg1.ca Cross Site Scripting vulnerability OBB-1248839

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
zdt
zdt
added 2020/08/01 12:0 a.m.563 views

CA Unified Infrastructure Management Nimsoft 7.80 Buffer Overflow Exploit

This Metasploit module exploits a buffer overflow within the CA Unified Infrastructure Management nimcontroller. The vulnerability occurs in the robot controller component when sending a specially crafted directorylist probe. Technically speaking the target host must also be vulnerable to...

10CVSS9.6AI score0.77415EPSS
SaveExploits9
Packet Storm
Packet Storm
added 2020/07/31 12:0 a.m.333 views

CA Unified Infrastructure Management Nimsoft 7.80 Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CA Unified Infrastructure Management Nimsoft 7.80 - Remote Buffer Overflow', 'Description' = %q This module exploits a buffer overflow within the...

10CVSS0.9AI score0.77415EPSS
SaveExploits9
Tenable Nessus
Tenable Nessus
added 2020/07/30 12:0 a.m.48 views

Fedora 31 : 1:java-1.8.0-openjdk (2020-508df53719)

July 2020 OpenJDK security update for OpenJDK 8. Full release notes: https://bitly.com/oj8u262 New features - JDK-8223147: JFR Backport Security fixes - JDK-8028431, CVE-2020-14579: NullPointerException in DerValue.equalsDerValue - JDK-8028591, CVE-2020-14578: NegativeArraySizeException in...

8.3CVSS6.3AI score0.0435EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
added 2020/07/30 12:0 a.m.258 views

Fedora 31 : 1:java-11-openjdk (2020-93cc9c3ef2)

July 2020 OpenJDK security update for OpenJDK 11 Full release notes: https://bitly.com/openjdk1108 Security fixes - JDK-8230613: Better ASCII conversions - JDK-8231800: Better listing of arrays - JDK-8232014: Expand DTD support - JDK-8233234: Better Zip Naming - JDK-8233239, CVE-2020-14562: Enhan...

8.3CVSS6.3AI score0.05166EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2020/07/27 12:0 a.m.69 views

Fedora 32 : 1:java-11-openjdk (2020-5d0b4a2b5b)

July 2020 OpenJDK security update for OpenJDK 11 Full release notes: https://bitly.com/openjdk1108 Security fixes - JDK-8230613: Better ASCII conversions - JDK-8231800: Better listing of arrays - JDK-8232014: Expand DTD support - JDK-8233234: Better Zip Naming - JDK-8233239, CVE-2020-14562: Enhan...

8.3CVSS6.3AI score0.05166EPSS
SaveExploits0References14
Oracle linux
Oracle linux
added 2020/07/24 12:0 a.m.41 views

NetworkManager security and bug fix update

1:1.22.8-5 - dhcp: fix handling IO error in nettools DHCPv4 client rh 1843357 - ifcfg-rh: handle '802-1x.,phase2-ca-path' rh 1843360, CVE-2020-10754...

4.3CVSS0.6AI score0.00983EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2020/07/07 1:42 p.m.10 views

python-urllib3: Certification mishandle when error should be thrown

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use o...

7.5CVSS7.3AI score0.02836EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/07/06 8:16 p.m.8 views

python-urllib3: Certification mishandle when error should be thrown

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use o...

7.5CVSS7.3AI score0.02836EPSS
SaveExploits0References5
CNVD
CNVD
added 2020/07/04 12:0 a.m.4 views

SQL Injection Vulnerability in Arctic Technology Website Building System Ca*** Page

Arctic Technology is mainly engaged in website construction, network promotion and enterprise WEB application team, is committed to enterprises, individuals, associations and organizations to provide website planning, construction, network maintenance and promotion services. There is a SQL...

7.7AI score
SaveExploits0
Cloud Foundry
Cloud Foundry
added 2020/06/24 12:0 a.m.13 views

USN-4377-1: ca-certificates update | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the “AddTrust External Root” CA. In addition, on Ubuntu 16.04 L...

7AI score
SaveExploits0Affected Software2
Fedora
Fedora
added 2020/06/23 1:23 a.m.32 views

[SECURITY] Fedora 32 Update: ca-certificates-2020.2.41-1.1.fc32

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

4.3CVSS2.1AI score0.48895EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2020/06/23 12:0 a.m.53 views

Fedora 32 : ca-certificates (2020-fb144e7de5)

updates the mozilla certificate list, removes expired certificates. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

4.3CVSS7.3AI score0.48895EPSS
SaveExploits1References2
Rows per page
Query Builder