Lucene search
+L

8168 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 4:31 a.m.17 views

CVE-2019-14516

The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks against requests for FAQs or Help...

7.4CVSS6.9AI score0.00697EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:23 a.m.12 views

CVE-2019-11674

Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack...

5.9CVSS6.7AI score0.00399EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:39 a.m.15 views

CVE-2018-19946

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in...

5.9CVSS6.9AI score0.00315EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:45 a.m.13 views

CVE-2015-1454

Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not properly validate certain certificates, which allows man-in-the-middle attackers to spoof ProxySG Client Managers, and consequently modify configurations and execute arbitrary software...

7.1CVSS7.2AI score0.00698EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:32 a.m.13 views

CVE-2013-4700

The Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.8CVSS6.2AI score0.00521EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/05/21 9:00 p.m.7 views

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation through incorrect assignment of trusted use instead of a rejected use for a certificate when using the -addreject option with the openssl x509 application. If a user intends to make a trusted certificate...

6.9CVSS6.8AI score0.00363EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/21 8:34 p.m.16 views

CVE-2008-1114

Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol PEAP, do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle MITM attacks...

4.3CVSS7.1AI score0.0058EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:53 p.m.16 views

CVE-2006-6468

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name FQDN during a "Validate Repository SSL Certificate" scan, which has unknown impact and attack vectors, possibly related to spoofed...

5.8CVSS7AI score0.00258EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/20 4:26 p.m.11 views

Security Bulletin: IBM Security QRadar EDR Software has multiple vulnerabilities (CVE-2024-45641, CVE-2023-33861)

Summary IBM Security QRadar EDR Software is affected by multiple vulnerabilities that could allow a remote attacker to bypass security restrictions or spoof a trusted entity. These vulnerabilities have been addressed in the latest update. Vulnerability Details CVEID:CVE-2024-45641 DESCRIPTION: IB...

6.5CVSS7AI score0.00238EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/05/20 4:15 p.m.10 views

CVE-2024-45641

IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate validation...

6.5CVSS5.8AI score0.00186EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/20 4:15 p.m.17 views

CVE-2024-45641

IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate validation...

6.5CVSS0.00186EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/20 3:27 p.m.63 views

CVE-2024-45641

IBM Security ReaQta EDR 3.12 contains a vulnerability due to improper SSL certificate validation that could allow an attacker to perform unauthorized actions. Affected component is the revalidation/handling of SSL certificates within the product; exploitation is network-based (no user interaction...

6.5CVSS6.3AI score0.00186EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/20 3:27 p.m.23 views

CVE-2024-45641 IBM Security ReaQta improper certificate validation

IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate validation...

6.5CVSS0.00186EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/20 3:27 p.m.9 views

CVE-2024-45641 IBM Security ReaQta improper certificate validation

IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate validation...

6.5CVSS6.4AI score0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/20 2:51 p.m.42 views

CVE-2023-33861 IBM Security ReaQta improper certificate validation

IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client...

6.5CVSS0.00238EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/20 2:51 p.m.37 views

CVE-2023-33861 IBM Security ReaQta improper certificate validation

IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client...

6.5CVSS6.3AI score0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/20 12:00 a.m.12 views

PT-2025-22155 · Ibm · Ibm Security Reaqta

Name of the Vulnerable Software and Affected Versions: IBM Security ReaQta EDR version 3.12 Description: The issue is related to improper SSL certificate validation, which could allow an attacker to perform unauthorized actions. Recommendations: For IBM Security ReaQta EDR version 3.12, update th...

6.5CVSS5.9AI score0.00186EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/20 12:00 a.m.11 views

IBM Security ReaQta EDR 信任管理问题漏洞

IBM Security ReaQta EDR is an Endpoint Detection and Response EDR solution from International Business Machines IBM that detects, investigates and responds to endpoint threats in real time through behavioral analytics and AI technology, providing automated threat hunting and incident response...

6.5CVSS6.6AI score0.00186EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/16 9:15 p.m.12 views

CVE-2025-32407

Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate any and all websites visited by the user. This is a critical misconfiguration in the way the browser validates the...

5.9CVSS5.8AI score0.00286EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/16 9:15 p.m.50 views

CVE-2025-32407

Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate any and all websites visited by the user. This is a critical misconfiguration in the way the browser validates the...

5.9CVSS0.00286EPSS
SaveExploits1References1
Rows per page
Query Builder