8757 matches found
PT-2024-32491 · Dell · Dell Secure Connect Gateway
Name of the Vulnerable Software and Affected Versions: Dell Secure Connect Gateway SCG 5.0 Appliance - SRS version 5.24 Description: The issue is related to an Improper Certificate Validation flaw. A low privileged attacker with remote access could potentially exploit this, leading to unauthorize...
Dell Secure Connect Gateway 信任管理问题漏洞
The Dell Secure Connect Gateway Dell SCG is a secure connectivity gateway from Dell, USA. A trust management issue vulnerability exists in Dell Secure Connect Gateway SCG version 5.24.00.14, which stems from a certificate validation vulnerability that contains an error and can be exploited by a...
Agent Dart 信任管理问题漏洞
Agent Dart is an AstroxNetwork open source agent library built for Internet computers for Dart and Flutter applications. A trust management issue vulnerability exists in Agent Dart prior to version 1.0.0-dev.29, which stems from certificate validation in lib/agent/certificate.dart not working...
PT-2024-7929 · Unknown +2 · Qbittorrent +2
Name of the Vulnerable Software and Affected Versions: qBittorrent versions prior to 5.0.1 Description: The issue is related to improper SSL/TLS certificate validation in qBittorrent, allowing an attacker to perform a "man-in-the-middle" attack. This could enable a remote attacker to compromise...
CentOS 7 : squid (RHSA-2024:1787)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1787 advisory. - Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4...
The vulnerability of the C++ Botan cryptographic library, related to incorrect certificate verification, allows attackers to influence the integrity of the system.
The vulnerability of the C++ Botan cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to influence the integrity of the system remotely...
CVE-2024-20385
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature...
CVE-2024-20385
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature...
CVE-2024-20385 Cisco Nexus Dashboard Orchestrator SSL Certificate Validation Vulnerability
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature...
CVE-2024-20385
The CVE-2024-20385 entry concerns Cisco Nexus Dashboard Orchestrator (NDO) SSL/TLS certificate validation. The vulnerability stems from the NDO Validate Peer Certificate site management feature, which validates certificates for APIC, CNC, and Cisco Nexus Dashboard only when a new site is added or...
Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature...
CVE-2024-44097
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. T...
CVE-2024-44097
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. T...
CVE-2024-44097
The Google Nest smart home product is affected by a trust management vulnerability (CVE-2024-44097 ) caused by the application failing to properly validate the server certificate during TLS connection initialization. A network attacker can exploit this to intercept the connection, allowing them t...
CVE-2024-44097
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. T...
Google Nest 安全漏洞
Google Nest is a smart home product from the American company Google Google. Google Nest suffers from a trust management issue vulnerability that stems from the application failing to properly validate the server certificate when initializing a TLS connection, which can be exploited by a cyber...
ROS-20241001-29
A vulnerability in the curl program is related to improper certificate validation. Exploitation of the vulnerability could allow an attacker acting remotely to affect the integrity of the system...
Important: libreoffice
Issue Overview: Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is displayed by LibreOffice befo...
Amazon Linux 2 : libreoffice (ALASLIBREOFFICE-2024-004)
The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by a vulnerability as referenced in the ALAS2LIBREOFFICE-2024-004 advisory. Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts tha...