EulerOS 2.0 SP2 : pidgin (EulerOS-SA-2017-1166)

According to the versions of the pidgin package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A denial of service flaw was found in the way Pidgin's Mxit plug-in handled emoticons. A malicious remote server or a man-in-the-middle attacker...

McAfee LiveSafe 16.0.3 - Man In The Middle Registry Modification Leading to Remote Command Execution

Vulnerabilities Summary The following advisory describes a Remote Command Execution found in McAfee McAfee LiveSafe MLS versions prior to 16.0.3. The vulnerability allows network attackers to modify the Windows registry value associated with the McAfee update via the HTTP backend-response. McAfee...

Honda Moto LINC Validation SSL Certificate Vulnerability

Honda Moto LINC is a mobile application from Honda Japan for managing motorcycle information such as maintenance records and fuel consumption. A security vulnerability exists in Honda Moto LINC version 1.6.1, which originates from the program failing to validate an SSL certificate. An attacker...

First Security Bank Sleepy Eye Mobile for iOS Information Disclosure Vulnerability

First Security Bank Sleepy Eye Mobile for iOS is an iOS-based mobile banking application from First Security Bank in the United States. The program features quick access to manage bank accounts, manage balances, pay bills and send money. A security vulnerability exists in version 3.0.0 of First...

PKI entities connection test intermittently fails to connect to CA server via cloud connector

The cloud connectors could not connect to PKI server. The below error is generated: 2017-08-08T13:55:39.253+0000 | 467782B2FC0AB30F | ERROR | http-nio-14443-exec-15 | MsCertSrvConnector | TestConnection to pki url certnew.cer failed with response Headers: null=HTTP/1.1 401 Unauthorized, and...

WebClientPrint Processor 2.0.15.109 TLS Validation Vulnerability

RedTeam Pentesting discovered that WebClientPrint Processor WCPP does not validate TLS certificates when initiating HTTPS connections. Thus, a man-in-the-middle attacker may intercept and/or modify HTTPS traffic in transit. This may result in a disclosure of sensitive information and the integrit...

Scientific Linux Security Update : pidgin on SL7.x x86_64 (20170801)

The following packages have been upgraded to a later upstream version: pidgin 2.10.11. Security Fixes : - A denial of service flaw was found in the way Pidgin's Mxit plug-in handled emoticons. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to crash Pidgi...

CVE-2015-5619

CVE-2015-5619 affects Logstash 1.4.x (<1.4.5) and 1.5.x (

CVE-2017-7932

An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus...

Input validation

An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus...

CVE-2017-7932

CVE-2017-7932 is described as an improper certificate validation issue in NXP i.MX devices (including i.MX 28/50/53, i.MX 7Solo/7Dual, Vybrid variants, and i.MX 6 family). Under security enabled configuration, a specially crafted certificate can bypass signature verification, enabling execution o...

CVE-2017-7932

An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus...

Intercom MaLion for Mac Information Disclosure Vulnerability

Intercom MaLion for Mac is a Mac-based IT asset management solution from Intercom Japan. A security vulnerability exists in Intercom MaLion versions 4.3.0 through 5.2.1 for Mac-based platforms, which originates from the program failing to properly validate certificates. An attacker could exploit...

Certificate Based Authentication : Troubleshooting steps

3. . If the value forDS Mapper usage isDisabled , run the following command to enable it: netsh http add sslcert ipport=0.0.0.0:443 certhash=20c70a6c6e66c3f82cf6098b7bcd2859486ecd10 appid=4dc3e181-e14b-4a21-b022-59fc669b0914 certstorename=my verifyclientcertrevocation=Enable...

PT-2017-18006 · Nxp · Nxp I.Mx 7Dual +16

Name of the Vulnerable Software and Affected Versions: NXP i.MX 28 NXP i.MX 50 NXP i.MX 53 NXP i.MX 7Solo NXP i.MX 7Dual NXP Vybrid VF3xx NXP Vybrid VF5xx NXP Vybrid VF6xx NXP i.MX 6ULL NXP i.MX 6UltraLite NXP i.MX 6SoloLite NXP i.MX 6Solo NXP i.MX 6DualLite NXP i.MX 6SoloX NXP i.MX 6Dual NXP i.M...

CVE-2017-10819

MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communication...

CVE-2017-10819

MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communication...

CVE-2017-10819

CVE-2017-10819 concerns MaLion for Mac, affected versions 4.3.0 to 5.2.1. The root cause is improper certificate validation in the application, which could allow an attacker to eavesdrop on encrypted communications. The linked CNVD/NVD entries confirm the same impact. There is no explicit remedia...

Multiple NXP i.MX products verified to bypass vulnerability

The NXP i.MX 50 and others are different families of microprocessor products from NXP Semiconductors in the Netherlands. A security vulnerability exists in several NXP i.MX products due to the program failing to properly validate certificates. An attacker could use the vulnerability to bypass...

RHEL 7 : gnutls (RHSA-2017:2292)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2292 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as...