DEBIAN-CVE-2024-51774

qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...

CVE-2024-51774

qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...

Botan Cryptographic Library Certificate Verification

The vulnerability of the C++ Botan cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to influence the integrity of the system remotely...

MongoDB TLS Certificate Validation Unauthorized Connection

The vulnerability of the MongoDB database management system is related to errors in the TLS certificate validation process. Exploiting this vulnerability allows an attacker to establish unauthorized connections to the MongoDB server remotely...

SINEC INS Privilege Escalation

The vulnerability of the software web interface for managing SINEC INS network infrastructure is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to enhance their privileges by intercepting requests sent to the UMC...

ESET SSL/TLS Scanning Bypass

The vulnerability of the scanning function of SSL/TLS-protection in ESET NOD32 antivirus software, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Endpoint Antivirus for Linux, ESET Server...

RTU500 Scripting Interface TLS Unauthorized Access Spoofing

The vulnerability of the TLS implementation in the RTU500 Scripting Interface for programming logic controllers from Hitachi Energy relates to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information a...

Security Component Bypass Signature

The vulnerability of the Security component in operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to bypass the signature verification...

Security Component Bypass Digital Signatures

The vulnerability of the Security component in iOS, watchOS, iPadOS, and macOS is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to bypass digital signature checks...

Python cryptography MITM

The vulnerability of the Python programming language’s cryptography interpreter is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

Bouncy Castle Certificate Disclosure

The vulnerability of the Bouncy Castle cryptographic protection mechanism is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

OpenSSL Heap Buffer Overflow DoS

The vulnerability of the X509VERIFYPARAMadd0policy function in the OpenSSL library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

FortiOS FortiProxy Certificate Validation Man-in-the-Middle

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protection against Internet attacks is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack remotely...

WorkSource Privilege Escalation

The vulnerability of the WorkSource function in Android operating systems is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to enhance their privileges...

SaltStack Salt Man-in-the-Middle

The vulnerability of the configuration management system and the remote execution of operations in SaltStack Salt is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

SupportAssist Component Man-in-the-Middle Info Disclosure

The vulnerability of the SupportAssist component in the SmartFabric OS10 network operating system is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain access to protected information by conducting “man-in-the-middle” attacks using...

Mbed TLS SSL/TLS Certificate Validation

The vulnerability of TLS and SSL Mbed TLS implementations is related to the incorrect use of the revocationDate check. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

Node.js RDN Spoofing

The vulnerability of the Relative Distinguished Name RDN component in the Node.js software platform is related to errors in the certificate validation process. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...

Windows Certificate Spoofing

The vulnerability of the Windows Certificate component in Windows operating systems is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to carry out spoofing attacks...

Squid Trust Management Vulnerability

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. Squid suffers from a trust management issue vulnerability that stems from incorrect certificate validation. An attacke...