Exploit for CVE-2025-46408

CVE-2025-46408 Improper Hostname Verification in EagleEyes...

Linux Distros Unpatched Vulnerability : CVE-2016-4763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers...

Linux Distros Unpatched Vulnerability : CVE-2023-5422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the SSLgetverifyresu...

Linux Distros Unpatched Vulnerability : CVE-2013-6662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google Chrome caches TLS sessions before certificate validation occurs. CVE-2013-6662 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2019-1010275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed...

Linux Distros Unpatched Vulnerability : CVE-2021-27018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to n...

Linux Distros Unpatched Vulnerability : CVE-2021-20110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker on the network can statically configure their IP address to matc...

Linux Distros Unpatched Vulnerability : CVE-2020-7956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to...

Security Bulletin: SSL Certificate Hostname Verification Bypass in Apache Commons HttpClient 3.x Allowing MITM Attacks affects watsonx.data

Summary Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

Advisory ROSA-SA-2025-2956

Software: libnbd 1.6.0 OS: ROSA Virtualization 2.1 unaffected versions = libnbd-1.6.0-6.0.1.rv3 affected versions libnbd-1.6.0-6.0.1.1.rv3 CVE-ID: CVE-2023-5215 BDU-ID: 2024-06033 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the nbdgetsize function of the libnbd library is related to the...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management ( CVE-2025-33142)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

Domain Name Validation Bypass with Apple Native Certificate Validation

...

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.

...

Unspecified Vulnerability in Akinsoft QR Menü

Akinsoft QR Menü is a digitized QR code menu system from Akinsoft Turkey. Akinsoft QR Menü s versions prior to 1.05.05 to v1.05.12 contain a security vulnerability that originates from improper certificate validation, which can be exploited by an attacker to cause HTTP response splitting...

PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate.

...

CVE-2025-33099

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation...

CVE-2024-12925

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting. This issue affects QR Menü: from s1.05.05 before v1.05.12...

Linux Distros Unpatched Vulnerability : CVE-2024-38825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The salt.auth.pki module does not properly authenticate callers. The password field contains a public certificate which is validated against a CA certificate by...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to insecure connections due to the redshift package (CVE-2025-5279)

Summary Redshift is used by DataStage on Cloud Pak for Data as part of the dataset processing fuctionality. Vulnerability Details CVEID:CVE-2025-5279 DESCRIPTION: When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SS...

Linux Distros Unpatched Vulnerability : CVE-2020-28972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers in the vmware.py files does not always validate the SSL/TLS...