CVE-2024-51774

qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...

CVE-2024-51774

qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...

CVE-2024-51774

Summary: CVE-2024-51774 affects qBittorrent prior to 5.0.1, which proceeds to use https URLs even after certificate validation errors. This creates a potential exposure to MITM-style manipulation affecting confidentiality, integrity, and availability (per CVSS 3.1: HIGH). Root cause (as stated): ...

CVE-2024-30149

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

CVE-2024-30149

HCL AppScan Source = 10.6.0 does not properly validate a TLS/SSL certificate for an executable...

HCL AppScan 安全漏洞

HCL AppScan is a suite of dynamic analysis testing tools from HCL Corporation, USA, which is primarily used for Web security testing. A security vulnerability exists in HCL AppScan version 10.6.0 and prior versions that stems from not properly validating the TLS/SSL certificate of an executable...

PT-2024-23213 · Hcl · Hcl Appscan Source

Name of the Vulnerable Software and Affected Versions: HCL AppScan Source versions 10.6.0 and below Description: The issue is related to improper validation of a TLS/SSL certificate for an executable. This could potentially lead to security risks if exploited. Recommendations: For HCL AppScan...

Security Bulletin: IBM MQ is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2023-50314)

Summary An issue was identified with IBM WebSphere Application Server Liberty, which IBM MQ ships and uses to supply IBM MQ Console and IBM MQ REST API functionality. Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could...

Fortinet Fortigate Missing certificate CN/SAN validation leads to information disclosure (FG-IR-21-074)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-074 advisory. - An improper validation of certificate with host mismatch CWE-297 vulnerability in FortiOS versions 6.4.6 and below may allo...

Security Bulletin: IBM Master Data Management vulnerable to remote attacker due to flaws found in OpenSSL (CVE-2023-0466, CVE-2023-0465)

Summary IBM Master Data Management v11.6, and v12.0 are vulnerable to remote attackers due to flaws found in OpenSSL. OpenSSL could allow a remote attacker to bypass security restrictions, caused by a flaw in the X509VERIFYPARAMadd0policy function. By using invalid certificate policies, an attack...

Security Bulletin: Maximo Application Suite - IBM WebSphere Application Server Liberty is vulnerable to CVE-2023-50314 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is vulnerable to CVE-2023-50314. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application...

Dell Secure Connect Gateway Trust Management Issue Vulnerability

The Dell Secure Connect Gateway Dell SCG is a secure connectivity gateway from Dell, USA. A trust management issue vulnerability exists in Dell Secure Connect Gateway SCG version 5.24.00.14, which stems from a certificate validation vulnerability that contains an error and can be exploited by a...

CVE-2024-43177 IBM Concert improper certificate validation

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute...

CVE-2024-43177

CVE-2024-43177 affects IBM Concert Software versions 1.0.0–1.0.1, with the root cause described as cookies being used without the SameSite attribute. Public sources note the vulnerability could enable attacks related to cookie handling, and the NVD metrics show a critical impact (base score 9.8 i...

CVE-2024-43177 IBM Concert improper certificate validation

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute...

PT-2024-8523 · Icinga · Icinga 2

Name of the Vulnerable Software and Affected Versions: Icinga 2 versions 2.4.0 through 2.14.2 Icinga 2 versions 2.4.0 through 2.13.9 Icinga 2 versions 2.4.0 through 2.12.10 Icinga 2 versions 2.4.0 through 2.11.11 Description: Icinga is a monitoring system that checks the availability of network...

CVE-2024-47241

Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data...

CVE-2024-47241

Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data...

CVE-2024-47241

Dell Secure Connect Gateway (SCG) 5.0 Appliance — SRS 5.24 contains an Improper Certificate Validation vulnerability. A low-privileged, remote attacker could exploit a certificate validation error to gain unauthorized access and modify transmitted data. Affected: SCG 5.24 (SRS). Root cause: certi...

CVE-2024-47241

Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data...