Lucene search
+L

8337 matches found

CNVD
CNVD
added 2019/06/26 12:00 a.m.8 views

Unspecified Vulnerability in ASUS HiVivo aspplication for ASUS Watch

ASUS HiVivo aspplication for ASUS Watch is an application for ASUS smartwatch from Asus ASUS of Taiwan, China. The program focuses on monitoring heart rate and exercise track etc. through the smartwatch. A security vulnerability exists in ASUS HiVivo aspplication for ASUS Watch prior to version...

9.1CVSS6.8AI score0.0092EPSS
SaveExploits1References1
OSV
OSV
added 2019/06/25 4:15 p.m.5 views

CVE-2019-4150

IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. IBM X-Force ID: 158510...

3.7CVSS6.1AI score0.00578EPSS
SaveExploits0References2
NVD
NVD
added 2019/06/25 4:15 p.m.24 views

CVE-2019-4150

IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. IBM X-Force ID: 158510...

4.3CVSS3.9AI score0.00578EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/06/25 3:45 p.m.31 views

CVE-2019-4150

IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. IBM X-Force ID: 158510...

3.7CVSS3.9AI score0.00578EPSS
SaveExploits0References2
CVE
CVE
added 2019/06/25 3:45 p.m.121 views

CVE-2019-4150

CVE-2019-4150 affects IBM Security Access Manager (ISAM) releases 9.0.1–9.0.6. The issue is improper or missing certificate validation, enabling MITM-style spoofing of a trusted entity. The vulnerability arises in certificate handling within ISAM components and could allow an attacker to imperson...

4.3CVSS5AI score0.00578EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2019/06/25 12:00 a.m.10 views

PT-2019-16930 · Ibm · Ibm Security Access Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager versions 9.0.1 through 9.0.6 Description: The issue allows an attacker to potentially spoof a trusted entity by using a man-in-the-middle MITM attack due to incorrect certificate validation. Recommendations: For...

4.3CVSS4.2AI score0.00578EPSS
SaveExploits0References3
OSV
OSV
added 2019/06/24 7:15 p.m.10 views

CVE-2017-17945

The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation...

9.1CVSS5.8AI score0.0092EPSS
SaveExploits1References1
NVD
NVD
added 2019/06/24 7:15 p.m.23 views

CVE-2017-17945

The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation...

9.1CVSS9.3AI score0.0092EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/06/24 6:22 p.m.23 views

CVE-2017-17945

The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation...

9.3AI score0.0092EPSS
SaveExploits1References1
Apple
Apple
added 2019/06/24 7:57 a.m.45 views

About the security content of watchOS 5.1.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

9.3CVSS0.6AI score0.12706EPSS
SaveExploits21Affected Software1
CNVD
CNVD
added 2019/06/24 12:00 a.m.6 views

IBM Security Access Manager Appliance Man-in-the-Middle Attack Vulnerability

IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from IBM, USA. The product is mainly used for access control and Web-based threat protection, providing system performance monitoring, log analysis and diagnosis. A security vulnerability exists in...

4.3CVSS6.7AI score0.00578EPSS
SaveExploits0References1
OSV
OSV
added 2019/06/20 3:15 p.m.7 views

CVE-2017-17944

The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation...

9.1CVSS5.8AI score0.0092EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/06/20 3:00 p.m.30 views

CVE-2017-17944

The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation...

9.2AI score0.0092EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:00 a.m.7 views

The vulnerability of the urllib3 module in the Python programming language, related to errors in the certificate validation process, allows a perpetrator to establish an SSL connection.

The vulnerability of the urllib3 module in the Python programming language is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to establish an SSL connection during a certificate validation failure...

7.5CVSS7.7AI score0.02836EPSS
SaveExploits0References8Affected Software4
Positive Technologies
Positive Technologies
added 2019/06/11 12:00 a.m.14 views

PT-2019-11734 · Cloudbees +1 · Cloudbees Cd Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins ElectricFlow Plugin version 1.1.5 and earlier CloudBees CD Plugin affected versions not specified Description: The issue concerns the disabling of SSL/TLS and hostname verification in Jenkins plugins. Specifically, the Jenkins...

6.5CVSS6.5AI score0.01303EPSS
SaveExploits0References8
GitLab Advisory Database
GitLab Advisory Database
added 2019/05/31 12:00 a.m.48 views

Improper Certificate Validation

An issue was discovered in Hybrid Group Gobot. The mqtt subsystem skips verification of root CA certificates by default...

7.5CVSS1.6AI score0.0071EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/05/29 3:29 p.m.8 views

CVE-2019-4264

IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or incorrectly validating a certificate. IBM X-Force ID: 160072...

5.9CVSS5.8AI score0.01013EPSS
SaveExploits0References3
NVD
NVD
added 2019/05/29 3:29 p.m.23 views

CVE-2019-4264

IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or incorrectly validating a certificate. IBM X-Force ID: 160072...

5.9CVSS5.4AI score0.01013EPSS
SaveExploits0References3
CVE
CVE
added 2019/05/29 3:10 p.m.85 views

CVE-2019-4264

CVE-2019-4264 affects IBM QRadar WinCollect (Agent) in QRadar SIEM 7.1.2–7.2.8 Patch 2. The root cause is that TLS Syslog server certificate validation is not performed (or is ignored), enabling MITM-style information disclosure by spoofing a trusted server. Public details specify that WinCollect...

5.9CVSS5.3AI score0.01013EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2019/05/29 12:00 a.m.10 views

PT-2019-17004 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM version 7.2.8 Description: The issue allows an attacker to obtain sensitive information by spoofing a trusted entity using man-in-the-middle techniques due to not validating or incorrectly validating a certificate...

5.9CVSS5.4AI score0.01013EPSS
SaveExploits0References4
Rows per page
Query Builder