Lucene search
+L

7971 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-22189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that...

7.2CVSS7AI score0.00655EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-48052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7AI score0.00307EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-47619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - syslog-ng is an enhanced log daemo. Prior to version 4.8.2, tlswildcardmatch matches on certificates such as foo..bar although that is not allowed. It is also...

7.5CVSS7AI score0.00354EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-3685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary CVE-2019-3685 Note that Nessus reli...

7.7CVSS7AI score0.00714EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-41916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal's PKI...

7.5CVSS6.3AI score0.00891EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2020-7041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509checkhost negati...

5.3CVSS5.8AI score0.01745EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.4 views

SUSE SLES12: libqt4 / libqt4-32bit / libqt4-devel / libqt4-devel-doc / etc (SUSE-SU-2025:02968-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02968-1 advisory. - CVE-2021-45930: Fixed out-of-bounds write leading to DoS bsc1196654 - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont...

8.4CVSS6.9AI score0.0158EPSS
SaveExploits2References27
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-22895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the Register with ...

5.9CVSS6.3AI score0.01031EPSS
SaveExploits1References2
OSV
OSV
added 2025/08/25 6:20 a.m.5 views

SUSE-SU-2025:02968-1 Security update for libqt4

This update for libqt4 fixes the following issues: - CVE-2021-45930: Fixed out-of-bounds write leading to DoS bsc1196654 - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont munitsPerEm bsc1211298 - CVE-2023-32763: Fixed buffer overflow on QTextLayout during rendering of an SVG file...

8.4CVSS7.8AI score0.0158EPSS
SaveExploits2References20
SUSE Linux
SUSE Linux
added 2025/08/25 6:20 a.m.6 views

Security update for libqt4

This update for libqt4 fixes the following issues: CVE-2021-45930: Fixed out-of-bounds write leading to DoS bsc1196654 CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont munitsPerEm bsc1211298 CVE-2023-32763: Fixed buffer overflow on QTextLayout during rendering of an SVG file with an...

7.8CVSS7.2AI score0.0158EPSS
SaveExploits2References38
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2018-1000500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Busybox contains a Missing SSL certificate validation vulnerability in The busybox wget applet that can result in arbitrary code execution. This attack appear t...

8.1CVSS7AI score0.02462EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2013-7110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof ...

4.3CVSS6.2AI score0.00835EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-16093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LemonLDAP::NG aka lemonldap-ng through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because th...

7.5CVSS7.1AI score0.00687EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:00 a.m.40 views

Palo Alto GlobalProtect App Windows 6.x < 6.2.8-h3 / 6.3.x < 6.3.3-h2 Improper Certificate Validation (CVE-2025-2183)

The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.x prior to 6.2.8-h3 or 6.3.x prior to 6.3.3-h2. It is, therefore, affected by an improper certificate validation vulnerability: - An insufficient certificate validation issue in the Palo Alto Networks GlobalProte...

5.3CVSS6AI score0.00112EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/08/19 3:34 p.m.2 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...

10CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2025/08/19 3:34 p.m.0 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...

10CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2025/08/19 3:34 p.m.2 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...

10CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2025/08/19 3:34 p.m.2 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...

10CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2025/08/19 3:34 p.m.5 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...

10CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2025/08/19 3:34 p.m.1 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...

10CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder