Lucene search
+L

7971 matches found

Cvelist
Cvelist
added 2025/09/01 2:19 p.m.21 views

CVE-2025-33099 IBM Concert Software information disclosure

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation...

5.9CVSS0.00188EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/01 1:15 p.m.7 views

CVE-2024-12925

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting. This issue affects QR Menü: from s1.05.05 before v1.05.12...

7.3CVSS0.00153EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/01 12:39 p.m.14 views

CVE-2024-12925 Host Header Injection in Akinsoft's QR Menu

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting. This issue affects QR Menü: from s1.05.05 before v1.05.12...

7.3CVSS0.00153EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/01 12:39 p.m.10 views

CVE-2024-12925

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting. This issue affects QR Menü: from s1.05.05 before v1.05.12...

7.3CVSS5.8AI score0.00153EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/01 12:39 p.m.19 views

CVE-2024-12925

CVE-2024-12925 concerns Akınsoft QR Menü. Multiple connected sources confirm a vulnerability in versions s1.05.05 through v1.05.11 due to improper validation of certificates with host mismatch, enabling HTTP response splitting. The issue originates in the certificate-host validation logic for the...

7.3CVSS5.8AI score0.00153EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/01 7:28 a.m.5 views

CVE-2022-38692

In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges...

6.6AI score0.00457EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.7 views

PT-2025-35481

Name of the Vulnerable Software and Affected Versions: Akınsoft QR Menü versions s1.05.05 through v1.05.11 Description: Improper validation of certificates with host mismatch in Akınsoft QR Menü allows for HTTP Response Splitting. Recommendations: Update Akınsoft QR Menü to version 1.05.12 or lat...

7.3CVSS6.4AI score0.00153EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/01 12:00 a.m.8 views

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of validation of certificate type 0, which could lead to local elevation of privilege...

7.8CVSS6.3AI score0.00339EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/01 12:00 a.m.7 views

Akınsoft QR Menü 安全漏洞

Akinsoft QR Menü is a digitized QR code menu system from Akinsoft Turkey. Akinsoft QR Menü s versions prior to 1.05.05 to v1.05.12 contain a security vulnerability that originates from improper certificate validation, which can be exploited by an attacker to cause HTTP response splitting...

7.3CVSS6.9AI score0.00153EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/01 12:00 a.m.9 views

IBM Concert Software 信任管理问题漏洞

IBM Concert Software is an application lifecycle risk identification software from International Business Machines IBM. A trust management issue vulnerability exists in IBM Concert Software versions 1.0.0 through 1.1.0, which stems from improper certificate validation and could lead to unauthoriz...

5.9CVSS6.3AI score0.00188EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.11 views

PT-2025-35486

Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.1.0 Description: IBM Concert Software versions 1.0.0 through 1.1.0 may allow a remote attacker to perform unauthorized actions using man-in-the-middle techniques due to improper certificate...

5.9CVSS6.3AI score0.00188EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/08/31 6:11 p.m.9 views

CVE-2025-30278

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central...

8.8CVSS6.9AI score0.00229EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/31 6:11 p.m.9 views

CVE-2025-30277

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central...

8.8CVSS6.9AI score0.00229EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.7 views

CVE-2025-58126

Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic...

6.9CVSS6.8AI score0.00109EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.8 views

CVE-2025-58124

Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic...

6.9CVSS6.8AI score0.00109EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.9 views

CVE-2025-58125

Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic...

6.9CVSS6.8AI score0.00109EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.7 views

CVE-2025-58127

Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic...

6.9CVSS6.8AI score0.00109EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.7 views

CVE-2025-58123

Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic...

6.9CVSS6.8AI score0.00109EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-36377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation. CVE-2021-36377 Note that Nessus relies on the...

7.5CVSS7.4AI score0.00574EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-44273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - e2guardian v5.4.x = v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode i.e., acting as a proxy or a transparen...

7.4CVSS7AI score0.00962EPSS
SaveExploits1References2
Rows per page
Query Builder