CVE-2025-64685

In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2NITRO-ENCLAVES-2025-073 (ALASNITRO-ENCLAVES-2025-073)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-073 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitt...

Siemens Solid Edge SE2025 信任管理问题漏洞

Siemens Solid Edge SE2025 is a development software from Siemens Germany. A trust management issue vulnerability exists in versions prior to Siemens Solid Edge SE2025 V225.0 Update 11, which stems from not properly validating client certificates and could lead to a man-in-the-middle attack...

Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25044)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25044 advisory. - Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25044)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25044 advisory. - Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information...

Siemens Solid Edge

SUMMARY Solid Edge is affected by improper certificate validation while connecting to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released a new version for Solid Edge SE2025 and recommends to update to the...

NETGEAR RAX30和NETGEAR RAXE300 安全漏洞

NETGEAR RAX30 and NETGEAR RAXE300 are both products of NETGEAR, Inc.NETGEAR RAX30 is a dual-band wireless router.NETGEAR RAXE300 is a wireless router. A security vulnerability exists in the NETGEAR RAX30 and RAXE300 that stems from improper certificate validation in the firmware update logic, whi...

Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2025-081 (ALASDOCKER-2025-081)

The version of runfinch-finch installed on the remote host is prior to 1.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-081 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25044)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25044 advisory. - Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information...

PT-2025-46371

Name of the Vulnerable Software and Affected Versions NETGEAR RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router versions prior to 1.0.14.108 NETGEAR RAXE300 Nighthawk AXE7800 Tri-Band WiFi 6E Router versions prior to 1.0.9.82 Description A flaw exists in the firmware update logic due to improper...

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2025-1271)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1271 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL...

Amazon Linux 2023 : runfinch-finch (ALAS2023-2025-1270)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1270 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2ECS-2025-078 (ALASECS-2025-078)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-078 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values...

CVE-2025-64685

In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure...

CVE-2025-64685

In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure...

CVE-2025-64685

JetBrains YouTrack before 2025.3.104432 is affected by CVE-2025-64685 due to missing TLS certificate validation, enabling data disclosure over the network. The issue is documented across multiple sources (NVD/NASL reads), with remediation to upgrade to YouTrack 2025.3.104432 or later. If details ...

CVE-2025-64685

In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure...

JetBrains YouTrack 信任管理问题漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A trust management issue vulnerability exists in versions prior to JetBrains YouTrack...

PT-2025-46154

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.104432 Description The issue concerns missing TLS certificate validation in JetBrains YouTrack. This lack of validation disables proper verification of server certificates when establishing TLS...

Important: amazon-ecr-credential-helper

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...