8328 matches found
CVE-2023-50356 Improper Certificate Validation in AREAL Topkapi Vision (Server)
SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision Server. This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login...
Improper Certificate Validation
meshcentral is vulnerable to Improper Certificate Validation. The vulnerability is due to the disabling of certificate verification in HTTPS connections by setting rejectUnauthorized to false, and utilizing outdated and insecure TLS versions known for security weaknesses; also use of algorithms...
AREAL Topkapi Trust Management Issue Vulnerability
AREAL Topkapi, a multi-sector solution from AREAL France, is an innovative software platform that provides functionality far beyond the traditional capabilities of SCADA software. AREAL Topkapi 6.2.4718 and prior versions suffer from a Trust Management Issue vulnerability that stems from an...
GHSA-8XW6-9H78-C89J Ylianst MeshCentral Missing SSL Certificate Validation
Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...
Input validation
Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...
CVE-2023-51837
Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...
PT-2024-14309 · Ylianst · Ylianst Meshcentral
Name of the Vulnerable Software and Affected Versions: Ylianst MeshCentral version 1.1.16 Description: The issue concerns missing SSL certificate validation. Recommendations: For Ylianst MeshCentral version 1.1.16, consider implementing proper SSL certificate validation to mitigate the risk of...
CVE-2023-51837
Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...
Ylianst MeshCentral Security Vulnerability
MeshCentral is a complete web-based remote monitoring and management site for the MeshCentral community. A security vulnerability exists in MeshCentral version 1.1.16 that stems from a missing SSL certificate validation...
Security Bulletin: IBM Storage Ceph is vulnerable to Improper Certificate Validation in the RHEL UBI (CVE-2023-28321)
Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. CVE-2023-28321 This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. Vulnerability Details CVEID:CVE-2023-28321 DESCRIPTION: cURL libcurl could allow a remote attacker to bypass security...
OESA-2024-1095 gnutls security update
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...
CVE-2023-33757
A lack of SSL certificate validation in Splicecom iPCS iOS App v1.3.4, iPCS2 iOS App v2.8 and before, and iPCS Android App v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack...
Design/Logic Flaw
A lack of SSL certificate validation in Splicecom iPCS iOS App v1.3.4, iPCS2 iOS App v2.8 and before, and iPCS Android App v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack...
Splicecom iPCS Security Vulnerability
Splicecom iPCS is an IP telephony software. A security vulnerability exists in Splicecom iPCS that stems from a lack of SSL certificate validation...
CVE-2023-33757
A lack of SSL certificate validation in Splicecom iPCS iOS App v1.3.4, iPCS2 iOS App v2.8 and before, and iPCS Android App v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack...
CVE-2023-33757
CVE-2023-33757 affects Splicecom iPCS: iOS app v1.3.4, iPCS2 for iOS v2.8 and earlier, and Android iPCS v1.8.5 and earlier suffer from insufficient SSL certificate validation, enabling attackers to perform man-in-the-middle disruption and eavesdropping on communications. Root cause is a lack of p...
squid: Denial of Service in SSL Certificate validation
A flaw was found in Squid. Due to an improper validation of the specified index bug, Squid compiled using --with-openssl is vulnerable to a denial of service attack against SSL Certificate validation. This flaw allows a remote server to perform a denial of service against the Squid Proxy by...
CVE-2023-33295
Cohesity DataProtect prior to 6.8.1u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation...