Viprinet Europe Multichannel VPN Router 300 Man-in-the-Middle Attack Vulnerability

Viprinet Europe Multichannel VPN Router 300 is a multichannel VPN router product from Viprinet Europe, Germany. A security vulnerability exists in the Viprinet Europe Multichannel VPN Router 300 that originates from the program failing to validate a certificate. An attacker could use this...

CVE-2016-1321

Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco serve...

Design/Logic Flaw

Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco serve...

CVE-2016-1321

Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco serve...

Cisco Universal Small Cell Devices Unauthorized Firmware Retrieval Vulnerability

A vulnerability in Cisco Universal Small Cell devices could allow an unauthenticated, remote attacker to retrieve firmware from a Cisco-hosted binary server. The vulnerability is due to insufficient enforcement of the two-way certificate validation process by the Cisco-hosted binary server to...

CVE-2016-2268

Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-2268

CVE-2016-2268 affects the Dell SecureWorks app for iOS prior to version 2.1. The vulnerability arises because the app does not validate SSL certificates, enabling a man‑in‑the‑middle attacker to spoof the server and obtain sensitive information via a crafted certificate. Exploitation details are ...

Apache Subversion Certificate Validation Information Disclosure Vulnerability

Apache Subversion is prone to certificate validation information disclosure vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

NTT DOCOMO Shoplat App for iOS SSL Certificate Validation Security Bypass Vulnerability

NTT DOCOMO Shoplat is a set of O2O e-commerce platform based on acoustic indoor positioning technology from NTT DOCOMO in Japan. The platform supports pushing reward points, e-coupons and other content information to users.Shoplat App for iOS is a set of Shoplat apps based on iOS platform. A...

Fast and Full Featured SSL Scanner: SSLyze

SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify mis-configurations affecting their SSL servers. SSLyze is all Python code but it uses an OpenSSL wrapper...

MariaDB/Oracle MySQL/Percona Server X.509 Certificate Validation Vulnerability

MariaDB is a product jointly developed by Monty Program Ab, Inc. and MariaDB Foundation, U.S.A. MySQL is an open database from Oracle Corporation, U.S.A. Percona Server is an upgraded and optimized version of the MySQL database. The 'sslverifyservercert' function in the sql-common/client.c file o...

Code injection

The sslverifyservercert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name...

Oracle Linux 7 : squid (ELSA-2015-2378)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2378 advisory. - Resolves: 1233265 - CVE-2015-3455 squid: incorrect X509 server certificate validation Tenable has extracted the preceding description block directly from the...

Gurunavi App for iOS Security Bypass Vulnerability

Gurunavi App for iOS is a set of Japanese mobile food software based on iOS. Gurunavi App for iOS fails to properly validate SSL certificates, allowing remote attackers to exploit the vulnerability to conduct man-in-the-middle attacks, impersonate a trusted server, and obtain sensitive informatio...

Cisco FireSIGHT Management Center Certificate Validation Vulnerability

A vulnerability in the rule update functionality of Cisco FireSIGHT Management Center MC could allow an unauthenticated, remote attacker to manipulate the content of the rule update packages and execute arbitrary code on the system. The vulnerability is due to lack of certificate validation durin...

Kaspersky AntiVirus - Certificate Handling Directory Traversal

Kaspersky AntiVirus - Certificate Handling Directory Traversal Source: https://code.google.com/p/google-security-research/issues/detail?id=539 When Kaspersky https inspection is enabled, temporary certificates are created in %PROGRAMDATA% for validation. I observed that the naming pattern is...

Cisco FireSIGHT Management Center Certificate Validation Vulnerability

A vulnerability in the rule update functionality of Cisco FireSIGHT Management Center MC could allow an unauthenticated, remote attacker to manipulate the content of the rule update packages and execute arbitrary code on the system. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions...

ANA App SSL Certificate Validation Security Bypass Vulnerability

ANA App is a suite of ANA airline inquiry applications. ANA App fails to properly validate SSL certificates, allowing remote attackers to exploit this vulnerability to conduct man-in-the-middle attacks and spoof trusted servers...

HP ArcSight SmartConnector Man-in-the-Middle Attack Vulnerability

HP ArcSight SmartConnector is a log collector product from Hewlett-Packard HP. A security vulnerability exists in HP ArcSight SmartConnector that stems from the program failing to properly validate SSL certificates. A remote attacker could use this vulnerability to conduct a man-in-the-middle...

Apple iOS X.509 Certificate Validation Vulnerability

IOS is an operating system developed by Apple for mobile devices. A certificate validation vulnerability exists in Apple iOS X.509, which allows attackers to bypass security restrictions to obtain sensitive information, execute arbitrary code, or launch other attacks such as denial of service...