Lucene search
+L

219 matches found

UbuntuCve
UbuntuCve
added 2022/12/07 10:15 p.m.92 views

CVE-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

7.5CVSS6.7AI score0.00535EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/07 10:15 p.m.61 views

PYSEC-2022-42986

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

7.5CVSS7.4AI score0.00535EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/07 9:15 p.m.41 views

CVE-2022-23491 Removal of TrustCor root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

6.8CVSS6.3AI score
SaveExploits0References5
Cvelist
Cvelist
added 2022/12/07 9:15 p.m.64 views

CVE-2022-23491 Removal of TrustCor root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

6.8CVSS7.7AI score0.00535EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/12/07 9:15 p.m.14 views

CVE-2022-23491 Removal of TrustCor root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

6.8CVSS7.5AI score0.00535EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/07 9:15 p.m.344 views

CVE-2022-23491

CVE-2022-23491 affects Certifi, a root CA bundle used to validate TLS certificates. The description notes Certifi 2022.12.07 removes TrustCor root certificates from its store as part of Mozilla trust-store updates due to an investigation into TrustCor. The vulnerability type is CWE-345: Insuffici...

7.5CVSS7AI score0.00535EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2022/12/07 9:15 p.m.57 views

CVE-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

7.5CVSS6.6AI score0.00535EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/12/07 12:00 a.m.10 views

Certifi 数据伪造问题漏洞

Certifi is a Python SSL certificate from Certifi Open Source. A data forgery vulnerability exists in Certifi versions 2017.11.05 through 2022.12.07, which can be exploited by an attacker to remove the root certificate from the root store "TrustCor"...

7.5CVSS6.7AI score0.00535EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/12/05 12:00 a.m.14 views

PT-2022-16025

Name of the Vulnerable Software and Affected Versions Certifi versions prior to 2022.12.07 Description The issue is related to the presence of TrustCor's root certificates in the list of root certificates, which has been removed due to TrustCor's involvement in producing spyware. This removal is...

7.5CVSS6.4AI score0.00535EPSS
SaveExploits0References52
Tenable Nessus
Tenable Nessus
added 2021/05/25 12:00 a.m.28 views

openSUSE Security Update : python-httplib2 (openSUSE-2021-772)

This update for python-httplib2 contains the following fixes : Security fixes included in this update : - CVE-2021-21240: Fixed a regular expression denial of service via malicious header bsc1182053. - CVE-2020-11078: Fixed an issue where an attacker could change request headers and body...

7.5CVSS6.9AI score0.03626EPSS
SaveExploits1References23
OSV
OSV
added 2021/03/19 4:16 p.m.12 views

SUSE-SU-2021:0915-1 Security Beta update for Salt

This update fixes the following issues: salt: - Only require python-certifi for CentOS7 - Fix race conditions for corner cases when handling SIGTERM by minion bsc1172110 - Implementation of suseip execution module to prevent issues with network.managed bsc1099976 - Fix recursion false detection i...

9.8CVSS7.2AI score0.92409EPSS
SaveExploits8References31
OSV
OSV
added 2021/03/19 4:15 p.m.8 views

SUSE-SU-2021:0914-1 Security Beta update for Salt

This update fixes the following issues: salt: - virt.networkupdate: handle missing ipv4 netmask attribute - Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules bsc1177474 - Fix race conditions for corner cases when handling SIGTERM by minion bsc1172110 - Allow extrafilerefs ...

9.8CVSS7.2AI score0.92409EPSS
SaveExploits8References31
hackapp
hackapp
added 2016/04/01 8:52 a.m.19 views

Certifi-gate Scanner - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Certifi-gate Scanner published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
myhack58
myhack58
added 2015/08/28 12:00 a.m.24 views

Android devices frequently have pits: Certifi-gate vulnerability control-screen recording-vulnerability warning-the black bar safety net

! This month's black hat conference disclosure vulnerability Certifi-gate exposed android security repeatedly go wrong. The black bar safety net Encyclopedia: what is the Certifi-gate “Certifi-gate”is a vulnerability, this vulnerability exists in the Android phone remote support...

1.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2015/08/25 2:55 p.m.11 views

Google Pulls App Exploiting Certifi-Gate Vulnerability

A mobile application exploiting the so-called Certifi-gate vulnerability disclosed at Black Hat has been removed from the Google Play store. Though the number of downloads of Recordable Activator, a screen recorder app for Android devices, hovers between 100,000 and a half-million, researchers at...

1.4AI score
SaveExploits0References2
myhack58
myhack58
added 2015/08/20 12:00 a.m.15 views

Android mediaserver components exposed high-risk vulnerabilities CVE-2 0 1 5-3 8 4 2, and affects all Android devices-vulnerability warning-the black bar safety net

! On the weeks, Android broke a wave of vulnerabilities, including Stagefright, a 0day serialization vulnerabilities, the Certifi-Gate vulnerability, etc., recent trends in science and technology fellows and broke yet another high-risk VulnerabilityCVE-2 0 1 5-3 8 4 2, and this one vulnerability...

1.7AI score
SaveExploits0
myhack58
myhack58
added 2015/08/18 12:00 a.m.25 views

Android pre-installed plug-ins“certificate gate”vulnerability analysis of a reducing-vulnerability warning-the black bar safety net

2 0 1 5 Blackhat conference in addition to broke an MMS black out Android Stagefright vulnerability, but also proof of the many other Android vulnerability, which has one called“CERTIFI-GATE”in the certificate of the vulnerability, see the topic on the description, This is another one can control...

7.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/08/07 5:25 a.m.41 views

"Certifi-Gate" Android Vulnerability Lets Hackers Take Complete Control of Your Device

Android users are busy fighting with Stagefright vulnerability while the popular mobile operating system faces another critical security vulnerability, dubbed as “Certifi-Gate”. Millions of Android devices could be hacked exploiting a plugin that comes pre-installed on your Android devices by the...

6.8AI score
SaveExploits0
android
android
added 2015/08/06 12:00 a.m.24 views

certifi-gate

Certifi-gate is a set of vulnerabilities in the authorization methods between mobile Remote Support Tool mRST apps and system-level plugs on a device. mRSTs allow remote personnel to offer customers personalized technical support for their devices by replicating a device’s screen and by simulatin...

3.9AI score
SaveExploits0References2
Rows per page
Query Builder