CVE-2023-51837

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...

Security Bulletin: IBM Storage Ceph is vulnerable to Improper Certificate Validation in the RHEL UBI (CVE-2023-28321)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. CVE-2023-28321 This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. Vulnerability Details CVEID:CVE-2023-28321 DESCRIPTION: cURL libcurl could allow a remote attacker to bypass security...

OESA-2024-1095 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

CVE-2023-33757

A lack of SSL certificate validation in Splicecom iPCS iOS App v1.3.4, iPCS2 iOS App v2.8 and before, and iPCS Android App v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack...

Design/Logic Flaw

A lack of SSL certificate validation in Splicecom iPCS iOS App v1.3.4, iPCS2 iOS App v2.8 and before, and iPCS Android App v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack...

Splicecom iPCS Security Vulnerability

Splicecom iPCS is an IP telephony software. A security vulnerability exists in Splicecom iPCS that stems from a lack of SSL certificate validation...

CVE-2023-33757

A lack of SSL certificate validation in Splicecom iPCS iOS App v1.3.4, iPCS2 iOS App v2.8 and before, and iPCS Android App v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack...

CVE-2023-33757

CVE-2023-33757 affects Splicecom iPCS: iOS app v1.3.4, iPCS2 for iOS v2.8 and earlier, and Android iPCS v1.8.5 and earlier suffer from insufficient SSL certificate validation, enabling attackers to perform man-in-the-middle disruption and eavesdropping on communications. Root cause is a lack of p...

squid: Denial of Service in SSL Certificate validation

A flaw was found in Squid. Due to an improper validation of the specified index bug, Squid compiled using --with-openssl is vulnerable to a denial of service attack against SSL Certificate validation. This flaw allows a remote server to perform a denial of service against the Squid Proxy by...

CVE-2023-33295

Cohesity DataProtect prior to 6.8.1u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation...

CVE-2023-33295

Cohesity DataProtect prior to 6.8.1u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation...

Improper access control

Cohesity DataProtect prior to 6.8.1u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation...

Cohesity DataProtect Security Vulnerability

Cohesity DataProtect is a high-performance, secure backup and recovery solution from Cohesity. A security vulnerability exists in Cohesity DataProtect versions 6.8.1 , 6.6.0d that stems from a lack of TLS certificate validation, resulting in incorrect access control...

CVE-2023-33295

Cohesity DataProtect (versions prior to 6.8.1_u5 or 7.1) contains an improper access control vulnerability caused by lack of TLS certificate validation. The issue affects the authentication/authorization boundary, potentially exposing data access until remediated. CVE-2023-33295 entries across NV...

The vulnerability of the Server Key Distribution service in the Windows operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the Server Key Distribution service in the Windows operating system is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

CVE-2023-33295

Cohesity DataProtect prior to 6.8.1u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation...

CVE-2023-33295

Cohesity DataProtect prior to 6.8.1u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation...

Security Bulletin: IBM Storage Ceph is vulnerable to Improper Certificate Validation in the RHEL UBI (CVE-2023-28321)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. CVE-2023-28321 This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. Vulnerability Details CVEID: CVE-2023-28321 DESCRIPTION: cURL libcurl could allow a remote attacker to bypass security...

AZL-34740 CVE-2024-0567 affecting package gnutls for versions less than 3.8.3-1

A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of...

DEBIAN-CVE-2024-0567

A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of...