CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

UBUNTU-CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

CVE-2012-6709

CVE-2012-6709 concerns Elinks 0.12 and Twibright Links 2.3 failing to validate SSL certificates. Connected advisories (EulerOS) and Nessus plugins reference the same issue and identify this as an unpatched vulnerability affecting ELINKS-related packages across multiple Linux distributions. The ro...

CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

CVE-2017-17298

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

CVE-2017-12721

An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle MITM attack...

CVE-2017-12721

An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle MITM attack...

Input validation

An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle MITM attack...

CVE-2017-12721

An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle MITM attack...

CVE-2017-12721

This CVE concerns the Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump and its failure to validate host certificates, enabling potential MITM attacks. Affected firmware versions are 1.1, 1.5, and 1.6. The underlying issue is Improper Certificate Validation, which can allow remote atta...

Schneider Electric IGSS Mobile

CVSS v3 6.4 ATTENTION: Locally exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: IGSS Mobile Vulnerabilities: Improper Certificate Validation, Plaintext Storage of a Password AFFECTED PRODUCTS Schneider Electric reports that the vulnerabilities affect the following IGS...

Vobot Clock Information Disclosure Vulnerability

The Vobot Clock is a smart bedside alarm clock equipped with Amazon Alexa, Sleep Coach and Daily Routine programs. An information disclosure vulnerability exists in VOBOT CLOCK versions prior to 0.99.30. The vulnerability arises because the Vobot firmware does not validate the certificate of the...

Pulse Secure Desktop Linux clients GUI component man-in-the-middle bypass security vulnerability

Pulse Secure Desktop Linux clients formerly known as Juniper Junos Pulse is Juniper Networks' suite of Linux-based client software for accessing endpoint devices on the Juniper Pulse Secure Gateway.The GUI component also known as PulseUI is one of the graphical user interfaces. The GUI component...

CVE-2009-5144

Summary: CVE-2009-5144 affects the Apache mod-gnutls module, which integrates GnuTLS with Apache HTTP Server. The vulnerability is that mod-gnutls does not validate client certificates when the directory context is configured with "GnuTLSClientVerify require", allowing a remote attacker to spoof ...

Code injection

The GUI component aka PulseUI in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set...

CVE-2018-6374

The GUI component aka PulseUI in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set...

CVE-2018-6374

The GUI component aka PulseUI in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set...

CVE-2018-6374

The GUI component aka PulseUI in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set...

CVE-2018-6374

CVE-2018-6374 affects Pulse Secure Desktop Linux clients where the GUI component (PulseUI) fails to perform strict SSL certificate validation, enabling manipulation of the Pulse Connection set. Affected versions include Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE...

Rubrik CDM Certificate Validation Vulnerability

Rubrik CDM is a cloud data management system from Rubrik USA. The system integrates backup, instant recovery, replication, search, analytics, archiving and replication data management into one secure architecture in the data center and in the cloud. A certificate validation vulnerability exists i...