Lucene search
+L

184 matches found

Citrix
Citrix
added 2023/03/02 12:00 a.m.19 views

workspace cannot find a valid smart card certificate

Workspace App gives error " cannot find a valid smart card certificate". This works via Browser but not via Workspace App...

7.1AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2023/02/16 12:00 a.m.11 views

CVE-2022-48308

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...

6.3CVSS6.7AI score0.00191EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:29 a.m.7 views

SUSE CVE-2014-2653

The verifyhostkey function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate...

6.5CVSS8AI score0.01988EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:15 a.m.6 views

SUSE CVE-2015-6251

Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName DN entry in a certificate...

5CVSS6.8AI score0.1903EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/02/06 12:00 a.m.7 views

CVE-2022-46496

BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...

7.2AI score0.00949EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/12 10:15 p.m.21 views

Code injection

Using the ability to perform a Man-in-the-Middle MITM attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted. In this specific scenario, the application's network traffic was intercepted using a proxy server set up in 'transparent' mode...

4.3CVSS5.5AI score0.00316EPSS
SaveExploits0References1Affected Software1
Citrix
Citrix
added 2021/11/04 12:00 a.m.16 views

XenMobile 10.x : "Error: Invalid File format" while importing certificate to XenMobile console:

While trying to import/upgrade certificate to XenMobile Server console, gets error as: 'Invalid File format' or 'Configuration error has occurred'...

7.1AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2021/08/05 8:16 p.m.9 views

CVE-2021-22924

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...

6AI score0.0627EPSS
SaveExploits1References15
Citrix
Citrix
added 2021/02/18 12:00 a.m.16 views

App Layering 2011 : After ELM Upgrade to 2011 from 2005, adding layer version gives "The issuing certificate does not have a usable private key."

--after upgrading ELM from 2005 to 2011 -- getting an error when we try to add a version to a layer "The issuing certificate does not have a usable private key." -- have offload compositing enabled on vCentre connectors...

7AI score
SaveExploits0
Citrix
Citrix
added 2021/01/07 12:00 a.m.11 views

Unable to use TLS/SSL LDAP Auth after ADM upgrade to latest build 13.0-71.40 - TLS Handshake fails with "Unknown CA"

After upgrading ADM to latest build 13.0-71.40 External Authentication fails when LDAP Server is configured using Security type SSL and TLS. When retrieving Attributes on LDAP Server config from ADM GUI throw this error :: "LDAP IP Address or Port Number provided is invalid." Network trace shows...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/07/10 10:43 p.m.49 views

Popular TP-Link Family of Kasa Security Cams Vulnerable to Attack

A popular consumer-grade security camera made by TP-Link and sold under the Kasa brand has bevy of bugs that open the hardware to remote attacks, such as giving hackers access to private video feeds and the ability to change device settings. The researcher Jason Kent, with Cequence Security,...

7.8AI score
SaveExploits0References5
OSV
OSV
added 2020/06/29 10:17 a.m.5 views

OPENSUSE-SU-2020:0903-1 Security update for mutt

This update for mutt fixes the following issues: - CVE-2020-14954: Fixed a response injection due to a STARTTLS buffering issue which was affecting IMAP, SMTP, and POP3 bsc1173197. - CVE-2020-14093: Fixed a potential IMAP Man-in-the-Middle attack via a PREAUTH response bsc1172906, bsc1172935. -...

5.9CVSS5.8AI score0.02288EPSS
SaveExploits0References7
OSV
OSV
added 2020/06/29 9:10 a.m.8 views

SUSE-SU-2020:1794-1 Security update for mutt

This update for mutt fixes the following issues: - CVE-2020-14954: Fixed a response injection due to a STARTTLS buffering issue which was affecting IMAP, SMTP, and POP3 bsc1173197. - CVE-2020-14093: Fixed a potential IMAP Man-in-the-Middle attack via a PREAUTH response bsc1172906, bsc1172935. -...

5.9CVSS5.5AI score0.02288EPSS
SaveExploits0References7
Citrix
Citrix
added 2020/06/26 12:00 a.m.12 views

Binding the certificate gives error "certificate is not a server certificate"

While binding the certificate you might get theerror "certificate is not a server certificate"...

7.1AI score
SaveExploits0
OSV
OSV
added 2019/11/21 11:15 p.m.17 views

CVE-2014-2901

wolfssl before 3.2.0 does not properly issue certificates for a server's hostname...

7.5CVSS6.8AI score
SaveExploits0References3
NVD
NVD
added 2019/11/21 11:15 p.m.26 views

CVE-2014-2904

wolfssl before 3.2.0 has a server certificate that is not properly authorized for server authentication...

7.5CVSS7.6AI score0.00879EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/11/19 4:44 p.m.33 views

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

7.5AI score0.01312EPSS
SaveExploits0References4
Citrix
Citrix
added 2019/10/14 12:00 a.m.11 views

"Certificate is not Trusted" on CWA 1910 for Mac and macOS Catalina

You have not chosen to trust "GlobalSign Root CA", the issuer of the server's security certificate...

7.2AI score
SaveExploits0
NVD
NVD
added 2019/09/10 6:15 p.m.14 views

CVE-2019-11497

In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and check the certificate signature. It then accepted the invalid certificate and attempted to use it to establish future connections to the remote cluster. This...

7.5CVSS7.6AI score0.00664EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/06/18 12:00 a.m.13 views

PT-2020-5868 · Go +1 · Crypto/X509 +5

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.12.16 Go versions 1.13.x prior to 1.13.7 crypto/cryptobyte package versions prior to 0.0.0-20200124225646-8b5121be2f68 Description: The issue is related to errors in the certificate authentication procedure in the...

7.8CVSS6.6AI score0.0473EPSS
SaveExploits0References50
Rows per page
Query Builder