CVE-2016-5016

Pivotal Cloud Foundry 239 and earlier, UAA aka User Account and Authentication Server 3.4.1 and earlier, UAA release 12.2 and earlier, PCF aka Pivotal Cloud Foundry Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not validate if a certificate is expired...

Google Chrome < 58.0.3029.81 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 58.0.3029.81. It is, therefore, affected by multiple vulnerabilities as referenced in the 201704stable-channel-update-for-desktop advisory. - Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029....

CVE-2016-1519

The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate...

CVE-2016-1519

Affected software: Grandstream Wave app for Android (package com.softphone.common), versions up to and including 1.0.1.26. Vulnerability: Improper SSL certificate validation in the app’s provisioning flow. Impact: Enables MITM attackers to spoof the Grandstream provisioning server via a crafted c...

CVE-2016-1184

Tokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not validate SSL certificates...

Buffer overflow

Google Chrome caches TLS sessions before certificate validation occurs...

CVE-2013-6662

Google Chrome caches TLS sessions before certificate validation occurs...

UBUNTU-CVE-2013-6662

Google Chrome caches TLS sessions before certificate validation occurs...

CVE-2013-6662

Google Chrome caches TLS sessions before certificate validation occurs...

CVE-2013-6662

Google Chrome caches TLS sessions before certificate validation occurs...

CVE-2013-6662

CVE-2013-6662 affects Google Chrome. The connected documents describe a vulnerability where Chrome caches TLS sessions before certificate validation, which can compromise session integrity. The impact details in the sources indicate minimal confidentiality impact, and partial integrity impact, wi...

Security update for pidgin (important)

This update for pidgin to version 2.12.0 fixes the following issues: This security issue was fixed: - CVE-2017-2640: Out of bounds memory read in purplemarkupunescapeentity boo1028835. These non-security issues were fixed: + libpurple: - Fix the use of uninitialised memory if running...

CVE-2015-7825

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service infinite loop and memory consumption via a certificate with a loop in the certificate chain...

CVE-2015-7825

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service infinite loop and memory consumption via a certificate with a loop in the certificate chain...

Code injection

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service infinite loop and memory consumption via a certificate with a loop in the certificate chain...

CVE-2015-7825

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service infinite loop and memory consumption via a certificate with a loop in the certificate chain...

CVE-2015-7825

Removed by vendor...

Apple Music for Android Certificate Validation Information Leakage Vulnerability

Apple Music is another new addition to the popular music scene introduced by Apple. Based on previous experience Apple Music may only work on Apple devices. Apple Music for Android has an information leakage vulnerability. An attacker can exploit the vulnerability to gain access to sensitive...

Trend Micro Enterprise Mobile Security Android Application Man-in-the-Middle Attack Vulnerability

Trend Micro Enterprise Mobile Security Android Application is a mobile security suite. Versions of Trend Micro Enterprise Mobile Security Android Application prior to 9.7.1193 lack SSL certificate validation, which could allow an attacker to perform a man-in-the-middle attack and present a forged...

MGASA-2017-0102 Updated pidgin packages fix security vulnerability

A server controlled by an attacker can send an invalid XML that can trigger an out-of-bound memory access. This might lead to a crash or, in some extreme cases, to remote code execution in the client-side CVE-2017-2640. The pidgin package has been updated to version 2.12.0, which fixes this issue...