PT-2024-9564 · Veeam · Veeam Backup & Replication

Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication affected versions not specified Description: An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during restore...

CVE-2024-6119

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

CVE-2024-6119

Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...

CVE-2024-39771

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack...

CVE-2024-39771

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack...

CVE-2024-39771

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack...

CVE-2024-39771

CVE-2024-39771 affects Safie QBiC CLOUD CC-2L (v1.1.30 and earlier) and Safie One (v1.8.2 and earlier). The root cause is improper certificate validation, which can allow a network-adjacent, unauthenticated attacker to perform a man‑in‑the‑middle and either obtain or alter communications of the a...

CVE-2024-39771

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack...

PT-2024-28667 · Qbic · Qbic Cloud Cc-2L

Name of the Vulnerable Software and Affected Versions: QBiC CLOUD CC-2L versions 1.1.30 and earlier Safie One versions 1.8.2 and earlier Description: The issue is related to improper certificate validation, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter...

Safie QBiC CLOUD CC-2L和Safie One 安全漏洞

Safie QBiC CLOUD CC-2L and Safie One are both products of Safie Japan.Safie QBiC CLOUD CC-2L is a webcam.Safie One is a surveillance camera. A security vulnerability exists in Safie QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier, which stems from improper validation of the...

GO-2022-0821 Improper Certificate Validation in HashiCorp Nomad in github.com/hashicorp/nomad

Improper Certificate Validation in HashiCorp Nomad in github.com/hashicorp/nomad...

CVE-2024-7570

Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would allow access to ITSM as any user...

CVE-2024-7570

Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would allow access to ITSM as any user...

CVE-2024-7570

Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would allow access to ITSM as any user...

CVE-2024-7570

Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would allow access to ITSM as any user...

CVE-2024-7570

CVE-2024-7570 affects Ivanti ITSM on-prem and Neurons for ITSM (versions 2023.4 and earlier). The root cause is improper certificate validation, enabling a remote attacker in a network-positioned MITM to craft a token that grants access to ITSM as any user. The vulnerability is rated HIGH on both...

N-able Ecosystem Agent 安全漏洞

N-able Ecosystem Agent is an agent system from N-able Canada. A security vulnerability exists in N-able Ecosystem Agent that stems from not properly validating SSL/TLS certificates, which could allow a malicious actor to perform man-in-the-middle operations and intercept traffic between the agent...

The vulnerability in the web interface of the exacqVision Web Service of the exacqVision surveillance system arises from errors in the TLS certificate validation process. This vulnerability allows a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of the exacqVision Web Service web interface of the video surveillance system involves errors in the authentication process for TLS certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “Man-in-the-Middle” attack...

Johnson Controls ExacqVision Web Server < 24.04 Improper Certificate Validation (JCI-PSA-2024-18)

The version of the Johnson Controls exacqVision Web Server running on the remote host is prior to 24.04. It is, therefore, affected by a certificate validation vulnerability. Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected...

PT-2024-36335 · N Able · Ecosystem Agent

Name of the Vulnerable Software and Affected Versions: Ecosystem Agent versions 4.0 through 4.1.5.2597 Ecosystem Agent versions 5.0 through 5.1.4.2473 Description: The issue is related to the improper validation of SSL/TLS certificates. This could allow a malicious actor to perform a...