Lucene search
K

19 matches found

Packet Storm News
Packet Storm News
added 2026/02/04 12:0 a.m.2 views

Post-Quantum Identity-Based TLS for 5G Service-Based Architecture and Cloud-Native Infrastructure

Cloud-native application platforms and latency-sensitive systems such as 5G Core networks rely heavily on certificate-based Public Key Infrastructure PKI and mutual TLS to secure service-to-service communication. While effective, this model introduces significant operational and performance...

5.5AI score
Exploits0
NVD
NVD
added 2025/09/30 11:15 p.m.4 views

CVE-2025-24525

Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the TLS certificate that shipped with the device. Remediation is available ...

8.7CVSS0.00043EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/30 12:0 a.m.2 views

PT-2025-40033

Name of the Vulnerable Software and Affected Versions Keysight Ixia Vision versions prior to 6.9.1 Description Keysight Ixia Vision contains hardcoded cryptographic material. This may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication. The...

8.7CVSS6.7AI score0.00043EPSS
Exploits0References10
CNNVD
CNNVD
added 2025/09/29 12:0 a.m.1 views

Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 22.0.1049, which stems from an unauthenticated management route exposure that could lead to certificate replacement, deletio...

10CVSS6.7AI score0.00154EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/09/29 12:0 a.m.1 views

PT-2025-39887

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.1049 Vasion Print formerly PrinterLogic Application versions prior to 20.0.2786 Description The Vasion Print Virtual Appliance Host and Application expose...

10CVSS6.8AI score0.00154EPSS
Exploits1References7
OSV
OSV
added 2025/09/11 12:38 p.m.2 views

SUSE-SU-2025:03169-1 Security update for regionServiceClientConfigAzure

This update for regionServiceClientConfigAzure contains the following fixes: - Update to version 3.0.0. bsc1246995 + SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to support SLE 16 when it gets released. - Update dependency name for metadata package, name chang...

5.8AI score
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/09/09 12:58 p.m.4 views

Security update for regionServiceClientConfigAzure

This update for regionServiceClientConfigAzure contains the following fixes: Update to version 3.0.0.bsc1246995 SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to support SLE 16 when it gets released. Update dependency name for metadata package, name change in SL...

7AI score
Exploits0References4
Citrix
Citrix
added 2025/05/19 12:0 a.m.7 views

Update NetScaler Console certificate

NetScaler Console allows you to replace the default inbuilt database certificates with your own certificates from a trusted certificate authority. You can also configure your own cipher suites in the NetScaler Console database. This feature provides greater flexibility and security for your...

7AI score
Exploits0
OSV
OSV
added 2024/09/03 3:15 p.m.0 views

CVE-2024-7346

Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perform the TLS handshake for a networked connection. This has been corrected so that default certificates are no longer capable of overriding host name validation and will need to b...

4.8CVSS5.7AI score
Exploits0References1
OSV
OSV
added 2024/04/10 4:15 p.m.0 views

CVE-2024-23734

Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link...

5.2CVSS5.9AI score0.00169EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.2 views

savignano S/Notify 安全漏洞

savignano S/Notify is savignano's most versatile email encryption solution for Jira, Confluence and Bitbucket. A security vulnerability exists in savignano S/Notify versions prior to 2.0.1 that stems from the presence of a cross-site request forgery vulnerability that allows an attacker to replac...

5.2CVSS6.7AI score0.00169EPSS
Exploits0References3
OSV
OSV
added 2023/05/30 4:15 p.m.0 views

CVE-2023-24568

Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates...

4.3CVSS5.8AI score0.00192EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/05/30 12:0 a.m.2 views

PT-2023-19687 · Dell · Dell Networker

Name of the Vulnerable Software and Affected Versions: Dell NetWorker affected versions not specified Description: The issue is related to an Improper Validation of Certificate with Host Mismatch vulnerability in the Rabbitmq port. This could disallow replacing CA signed certificates...

5CVSS4.3AI score0.00192EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2021/10/20 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2021:3469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.02755EPSS
Exploits0References6
OSV
OSV
added 2021/10/19 3:10 p.m.1 views

USN-5111-2 strongswan vulnerability

USN-5111-1 fixed a vulnerability in strongSwan. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that strongSwan incorrectly handled replacing certificates in the cache. A remote attacker could use this issue to...

7.5CVSS7.3AI score0.02755EPSS
Exploits0References2
OSV
OSV
added 2021/05/07 11:15 a.m.0 views

CVE-2020-36127

Pax Technology PAXSTORE v7.0.820200511171508 and lower is affected by an information disclosure vulnerability. Through the PUK signature functionality, an administrator will not have access to the current p12 certificate and password. When accessing this functionality, the administrator has the...

6.5CVSS6.6AI score0.00135EPSS
Exploits1References3
OSV
OSV
added 2020/08/20 11:15 p.m.0 views

CVE-2020-12619

MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enabled the...

5.9CVSS6.2AI score
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2019/01/30 8:35 a.m.29 views

Security Bulletin: IBM ToolsCenter Suite is affected by vulnerabilities in OpenSSL (CVE-2014-0160 and CVE-2014-0076)

Summary Security vulnerabilities have been discovered in OpenSSL. Description: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTL Vulnerability Details Abstract Security vulnerabilities have been discovered in OpenSSL. Content Vulnerability...

7.5CVSS0.3AI score0.94464EPSS
Exploits87
securityvulns
securityvulns
added 2008/09/24 12:0 a.m.42 views

Aruba Mobility Controller Shared Default Certificate

Aruba Mobility Controller Shared Default Certificate Product: Aruba Mobility Controller http://www.arubanetworks.com/products/mobilitycontrollers.php Aruba mobility controllers use X.509 certificates to protect access to the web management interface and to provide secure wireless authentication,...

1.4AI score
Exploits0
Rows per page
Query Builder