Lucene search
+L

8327 matches found

CNVD
CNVD
added 2018/03/14 12:00 a.m.15 views

SUSE Portus NGINX Djelibeybi configuration examples SSL Certificate Validation Vulnerability

SUSE Portus is an open source licensed service interface for the next generation of Docker registries to manage Docker registries.NGINX is a reverse proxy used in it.Djelibeybi configuration examples is one of the Djelibeybi configuration examples. A security vulnerability exists in Djelibeybi...

8.8CVSS7AI score0.00514EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2018/03/13 8:42 p.m.30 views

tiny-json-http missing SSL certificate validation

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 Oct 29 2016 contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks...

8.1CVSS7.4AI score0.00673EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2018/03/13 1:29 a.m.12 views

Input validation

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 Oct 29 2016 contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks...

6.8CVSS7.7AI score0.00673EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/03/13 1:29 a.m.19 views

CVE-2018-1000096

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 Oct 29 2016 contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks...

8.1CVSS7.9AI score
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/13 1:00 a.m.30 views

CVE-2018-1000096

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 Oct 29 2016 contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks...

7.7AI score0.00673EPSS
SaveExploits0References1
Prion
Prion
added 2018/03/12 4:29 a.m.20 views

Information disclosure

TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature...

5CVSS7.6AI score0.00696EPSS
SaveExploits0References3
NVD
NVD
added 2018/03/12 4:29 a.m.24 views

CVE-2017-18227

TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature...

7.5CVSS7.6AI score0.00696EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2018/03/12 4:00 a.m.34 views

CVE-2017-18227

TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature...

7.6AI score0.00696EPSS
SaveExploits0References3
CVE
CVE
added 2018/03/12 4:00 a.m.53 views

CVE-2017-18227

TitanHQ WebTitan Gateway has an incorrect certificate validation in its TLS interception feature, as described by CVE-2017-18227. The vulnerability relates to improper certificate handling within the TLS interception functionality of WebTitan Gateway. Connected documents corroborate the issue, bu...

7.5CVSS7.6AI score0.00696EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2018/03/11 7:29 p.m.23 views

CVE-2018-8059

The Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to certain configurations involving Docker Compose, have a Missing SSL Certificate Validation issue because no proxyssl directives are used...

8.8CVSS8.7AI score0.00514EPSS
SaveExploits0References2
OSV
OSV
added 2018/03/11 7:29 p.m.28 views

CVE-2018-8059

The Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to certain configurations involving Docker Compose, have a Missing SSL Certificate Validation issue because no proxyssl directives are used...

8.8CVSS7AI score
SaveExploits0References2
Cvelist
Cvelist
added 2018/03/11 7:00 p.m.36 views

CVE-2018-8059

The Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to certain configurations involving Docker Compose, have a Missing SSL Certificate Validation issue because no proxyssl directives are used...

8.7AI score0.00514EPSS
SaveExploits0References1
NVD
NVD
added 2018/03/09 11:29 p.m.24 views

CVE-2018-7234

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL certificate...

7.8CVSS7.5AI score0.00956EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/09 11:00 p.m.37 views

CVE-2018-7234

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL certificate...

7.5AI score0.00956EPSS
SaveExploits0References1
CVE
CVE
added 2018/03/09 11:00 p.m.66 views

CVE-2018-7234

Schneider Electric Pelco Sarix Professional devices running firmware older than 3.29.67 are affected by an arbitrary system file download vulnerability. The issue arises from insufficient validation in SSL/TLS handling, enabling an attacker to download arbitrary files via the /cgi-bin/ssldownload...

7.8CVSS7.5AI score0.00956EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2018/02/27 12:00 a.m.12 views

ELinks and Twibright Links Unauthorized Access Vulnerability

ELinks is an open source text-only browser for Linux.Twibright Links is a text-only web browser developed by the Twibright Labs organization that renders graphics and font-size variations with antialiasing and supports JavaScript. A security vulnerability exists in ELinks version 0.12 and Twibrig...

5.9CVSS6.7AI score0.00568EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/02/26 12:00 a.m.5 views

SAP NetWeaver Application Server ABAP Certificate Validation Security Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver Application Server ABAP, which stems from the applicatio...

6.8AI score
SaveExploits0References1
NVD
NVD
added 2018/02/23 5:29 p.m.16 views

CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

5.9CVSS5.6AI score0.00568EPSS
SaveExploits0References2
Prion
Prion
added 2018/02/23 5:29 p.m.18 views

Input validation

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

4.3CVSS7AI score0.00568EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2018/02/23 5:29 p.m.6 views

CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

5.9CVSS5.5AI score0.00568EPSS
SaveExploits0References3
Rows per page
Query Builder