CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2023-22642

CVE-2023-22642 is an improper certificate validation vulnerability (CWE-295) in Fortinet FortiAnalyzer and FortiManager. Affects FortiAnalyzer/ FortiManager versions 6.4.8–6.4.10, 7.0.0–7.0.5, and 7.2.0–7.2.1, exposing remote, unauthenticated attackers to a Man-in-the-Middle on the link to the Fo...

PT-2023-7378 · Fortinet · Fortiguard +2

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer and FortiManager versions 6.4.8 through 6.4.10 FortiAnalyzer and FortiManager versions 7.0.0 through 7.0.5 FortiAnalyzer and FortiManager versions 7.2.0 through 7.2.1 Description: The issue is related to an improper certificate...

Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation

Allegro Tech BigFlow prior to 1.6.0 is vulnerable to Missing SSL Certificate Validation...

CVE-2023-25392

Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...

CVE-2023-25392

Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...

CVE-2023-25392

Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...

PT-2023-20043

Name of the Vulnerable Software and Affected Versions Allegro Tech BigFlow versions prior to 1.6.0 Description The issue is related to Missing SSL Certificate Validation. This means that the software may not properly verify the identity of the server it is connecting to, potentially allowing for...

Allegro信任管理问题漏洞

Allegro is an open source, cross-platform library from Allegro that focuses on video games and multimedia programming. A security vulnerability exists in Allegro Tech BigFlow versions prior to 1.6, which stems from a lack of SSL certificate validation...

CVE-2023-25392

CVE-2023-25392 affects Allegro Tech BigFlow before 1.6.0. The issue is a lack of SSL certificate validation in BigFlow, enabling potential interception of traffic and exposure of confidential information (CVSS 3.1: Confidentiality High; Vector Network; Complexity High; Privileges None). Several c...

CVE-2023-25392

Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...

The vulnerability of the WorkSource function in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the WorkSource function in Android operating systems is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-27644

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files...

undertow: Server identity in https connection is not checked by the undertow client

A flaw was found in undertow. The undertow client is not checking the server identity the server certificate presents in HTTPS connections. This is a compulsory step that should at least be performed by default in HTTPS and in http/2...

The vulnerability of the Analyzer probe component of the software for data analysis and processing in Hitachi Ops Center Analyzer, as well as the Analytics probe component of the software for maintaining the operation of Hitachi Infrastructure Analytics Advisor (HIAA), allows a perpetrator to carry out a “man-in-the-middle” type attack.

The vulnerability of the Analyzer probe component of the Hitachi Ops Center Analyzer software for data analysis and processing, as well as the Analytics probe component of the Hitachi Infrastructure Analytics Advisor HIAA software for data processing, is related to errors in the certificate...

OpenSSL 信任管理问题漏洞

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

OpenSSL 信任管理问题漏洞

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

The vulnerability of the Erlang programming language, related to errors in the certificate validation process, allows attackers to access confidential data.

The vulnerability of the Erlang programming language is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data...

Debian: Security Advisory (DLA-3368-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...