3689 matches found
mail.lumc.ca Cross Site Scripting vulnerability OBB-4034252
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2025-27685
Vulnerability CVE-2025-27685 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 1.0.735, Application 20.0.1330. The issue arises from a configuration file that contains a CA certificate and a private key (V-2022-001). Public references in the connected sources corroborat...
CVE-2025-27685
Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001...
CVE-2025-27685
Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001...
Use Of A Broken Or Risky Cryptographic Algorithm
Easy-RSA is vulnerable to weak encryption algorithm usage. The vulnerability is due to insecure key generation due to the use of a weak default encryption algorithm when creating the private CA key with OpenSSL 3, and attackers can exploit this to more easily brute-force the CA private key and...
CVE-2024-39327
Incorrect Access Control vulnerability in Atos Eviden IDRA before 2.6.1 could allow the possibility to obtain CA signing in an illegitimate way...
CVE-2024-39327
Incorrect Access Control vulnerability in Atos Eviden IDRA before 2.6.1 could allow the possibility to obtain CA signing in an illegitimate way...
CVE-2024-39327
CVE-2024-39327 affects Atos Eviden IDRA before 2.6.1 with an Incorrect Access Control allowing illegitimate CA signing. Related disclosures (CVE-2024-39328 and CVE-2024-51505) describe Insecure Permissions and a race-condition privilege-escalation in Atos Eviden IDRA/IDCA before 2.7.0–2.7.1, enab...
CVE-2024-39327
Incorrect Access Control vulnerability in Atos Eviden IDRA before 2.6.1 could allow the possibility to obtain CA signing in an illegitimate way...
UBUNTU-CVE-2025-24807
eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access contro...
CVE-2025-24807 Fast DDS does not verify Permissions CA
eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access contro...
CVE-2025-24807 Fast DDS does not verify Permissions CA
eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access contro...
CVE-2019-13656
An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code...
CVE-2020-27858
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getNews method. Due to the improper restriction of XML External Entity...
Security update for python-requests
This update for python-requests contains the following fixes: Add patch to fix to inject the default CA bundles if they are not specified. bsc1226321, bsc1231500 Remove Requires on python-py, it should have been removed earlier. update to 2.32.3: Fixed bug breaking the ability to specify custom...
Security update for ca-certificates-mozilla
This update for ca-certificates-mozilla fixes the following issues: Updated to 2.68 state of Mozilla SSL root CAs bsc1227525 Added: FIRMAPROFESIONAL CA ROOT-A WEB Distrust: GLOBALTRUST 2020 Updated to 2.66 state of Mozilla SSL root CAs bsc1220356 Added: CommScope Public Trust ECC Root-01 CommScop...
GHSA-6WXM-MPQJ-6JPF vulnerabilities
Vulnerabilities for packages: amass, smarter-device-manager-fips, nfs-subdir-external-provisioner, terraform-provider-google, nfs-subdir-external-provisioner-fips, sriov-network-device-plugin-fips, opa-envoy, flux-image-reflector-controller, step-ca-fips, caddy, dgraph, step-fips,...
CVE-2024-45339 vulnerabilities
Vulnerabilities for packages: amass, smarter-device-manager-fips, nfs-subdir-external-provisioner, terraform-provider-google, nfs-subdir-external-provisioner-fips, sriov-network-device-plugin-fips, opa-envoy, flux-image-reflector-controller, step-ca-fips, caddy, dgraph, step-fips,...
