DEBIAN-CVE-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

PYSEC-2022-42986

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

UBUNTU-CVE-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

Design/Logic Flaw

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

CVE-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

2keys (=0.5.1), 8a-scraper (>=0.0.2 <=0.0.4) +1631 more potentially affected by CVE-2022-23491 via certifi (>=2017.11.5 <=2021.5.30)

certifi PYPI version =2017.11.5, =0.0.2, =0.0.6, =1.0.0, =1.0.2, =0.1.1, =1.0.0, =0.1.0, =0.1.0, =1.0.1, =2.1.3, =1.0.0, =2.1.0, =0.0.3, =0.0.4 and more Source cves: CVE-2022-23491 Source advisory: OSV:PYSEC-2022-42986...

PYSEC-2022-42986

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

CVE-2022-23491

CVE-2022-23491 affects Certifi, a root CA bundle used to validate TLS certificates. The description notes Certifi 2022.12.07 removes TrustCor root certificates from its store as part of Mozilla trust-store updates due to an investigation into TrustCor. The vulnerability type is CWE-345: Insuffici...

CVE-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

CVE-2022-23491 Removal of TrustCor root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

CVE-2022-23491 Removal of TrustCor root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

CVE-2022-23491 Removal of TrustCor root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

Certifi 数据伪造问题漏洞

Certifi is a Python SSL certificate from Certifi Open Source. A data forgery vulnerability exists in Certifi versions 2017.11.05 through 2022.12.07, which can be exploited by an attacker to remove the root certificate from the root store "TrustCor"...

PT-2022-16025

Name of the Vulnerable Software and Affected Versions Certifi versions prior to 2022.12.07 Description The issue is related to the presence of TrustCor's root certificates in the list of root certificates, which has been removed due to TrustCor's involvement in producing spyware. This removal is...

openSUSE Security Update : python-httplib2 (openSUSE-2021-772)

This update for python-httplib2 contains the following fixes : Security fixes included in this update : - CVE-2021-21240: Fixed a regular expression denial of service via malicious header bsc1182053. - CVE-2020-11078: Fixed an issue where an attacker could change request headers and body...

SUSE-SU-2021:0915-1 Security Beta update for Salt

This update fixes the following issues: salt: - Only require python-certifi for CentOS7 - Fix race conditions for corner cases when handling SIGTERM by minion bsc1172110 - Implementation of suseip execution module to prevent issues with network.managed bsc1099976 - Fix recursion false detection i...

SUSE-SU-2021:0914-1 Security Beta update for Salt

This update fixes the following issues: salt: - virt.networkupdate: handle missing ipv4 netmask attribute - Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules bsc1177474 - Fix race conditions for corner cases when handling SIGTERM by minion bsc1172110 - Allow extrafilerefs ...

Certifi-gate Scanner - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Certifi-gate Scanner published at the 'play' market has multiple vulnerabilities...

Android devices frequently have pits: Certifi-gate vulnerability control-screen recording-vulnerability warning-the black bar safety net

! This month's black hat conference disclosure vulnerability Certifi-gate exposed android security repeatedly go wrong. The black bar safety net Encyclopedia: what is the Certifi-gate “Certifi-gate”is a vulnerability, this vulnerability exists in the Android phone remote support...

Google Pulls App Exploiting Certifi-Gate Vulnerability

A mobile application exploiting the so-called Certifi-gate vulnerability disclosed at Black Hat has been removed from the Google Play store. Though the number of downloads of Recordable Activator, a screen recorder app for Android devices, hovers between 100,000 and a half-million, researchers at...