8359 matches found
CVE-2017-14806
A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...
CVE-2020-5522
The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2020-5521
The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Input validation
A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...
CVE-2017-14806
CVE-2017-14806 concerns an Improper Certificate Validation in SUSE Studio onsite’s susestudio-common, affecting version 1.3.17-56.6.3 and earlier. The vulnerability could allow remote attackers to perform MITM on repository connections, enabling modification of delivered packages. Connected docum...
CVE-2017-14806 Insecure handling of repodata and packages in SUSE Studio onlite
A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...
PT-2022-1547 · Node.Js +7 · Node.Js +7
Name of the Vulnerable Software and Affected Versions: Node.js versions 12.22.9 Node.js versions 14.18.3 Node.js versions 16.13.2 Node.js versions 17.3.1 Description: The issue is related to the conversion of SANs Subject Alternative Names to a string format in Node.js, which is used to check pee...
Huawei EulerOS: Security Advisory for pidgin (EulerOS-SA-2017-1165)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for elinks (EulerOS-SA-2019-2376)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for elinks (EulerOS-SA-2019-2574)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Improper Certificate Validation in Microsoft
PoC exploit for CVE-2020-0601, a vulnerability in the signature verification of certificates using elliptic curve cryptography ECC in Windows 10. The exploit targets the MicrosoftECCProductRootCertificateAuthority.cer, a trusted root certificate authority CA using ECC. The vulnerability allows an...
CVE-2011-2669
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates...
Input validation
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates...
CVE-2011-2669
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates...
CVE-2011-2669
CVE-2011-2669 affects Mozilla Firefox prior to 3.6 due to an issue in certificate validation that can trigger a denial-of-service. Connected sources (e.g., JVN entries) confirm the vulnerability stems from how certificates are validated, with impact described as DoS when loading HTTPS sites with ...
CVE-2011-2669
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates...
CVE-2011-2669
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates...
Exploit for Improper Certificate Validation in Microsoft
Awesome-CVE-2020-0601 ✔ !Awesomehttps://cdn.rawgit.com/si...
Stable Channel Update for Desktop
The stable channel has been updated to 79.0.3945.130 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...