CVE-2014-2902: Improper Certificate Validation

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

SQL injection vulnerability in the ca***.php file in the background of Yunye CMS (CNVD-2020-00234)

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background ca.php file of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

Mozilla Firefox ESR < 24.2 Multiple Vulnerabilities

Binary data 701241.prm...

PT-2019-6582

Name of the Vulnerable Software and Affected Versions Mercurial versions prior to 1.6.4 Description The issue allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack due to the failure to verify the Common Name field of SSL...

Thunderwind Movie CMS Aj***.php page ca*** parameter SQL injection vulnerability

Thunderwind CMS is a video-on-demand system developed using Thinkphp framework + Mysql to ensure the stability and efficiency of the program. Thunderwind Movie CMS Aj.php page ca parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database...

CVE-2019-13657

CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

CVE-2019-13657

CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

Design/Logic Flaw

CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

CVE-2019-13657

CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

CVE-2019-13657

CVE-2019-13657 affects CA Performance Management 3.5.x, 3.6.x prior to 3.6.9, and 3.7.x prior to 3.7.4. The issue is a default credential vulnerability that allows a remote attacker to execute arbitrary commands and compromise system security. Connected documents corroborate affected products and...

CVE-2019-13657: Use of Hard-coded Credentials

CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

PT-2019-13465

Name of the Vulnerable Software and Affected Versions CA Performance Management versions 3.5.x through 3.6.8 and versions 3.7.x through 3.7.3 Description The issue allows a remote attacker to execute arbitrary commands and compromise system security due to a default credential vulnerability...

xray505.ca Improper Access Control vulnerability

Security Researcher Gh05tPT Helped patch 6844 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting xray505.ca website and its users. Following coordinated...

CA Performance Management CVE-2019-13657 Default Credentials Security Bypass Vulnerability

Description CA Performance Management is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and execute arbitrary command. The following products are vulnerable: NetOps 19.1 and prior CA Performance Management 3.7.x prior to 3.7.4 C...

"Certificate is not Trusted" on CWA 1910 for Mac and macOS Catalina

You have not chosen to trust "GlobalSign Root CA", the issuer of the server's security certificate...

CVE-2019-13658

CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

Design/Logic Flaw

CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

CVE-2019-13658

CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

CVE-2019-13658: Use of Hard-coded Credentials

CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

PT-2019-13466

Name of the Vulnerable Software and Affected Versions CA Network Flow Analysis versions 9.x through 10.0.x Description The issue allows a remote attacker to execute arbitrary commands and compromise system security due to a default credential vulnerability. Recommendations For CA Network Flow...