8084 matches found
PT-2023-7207 · Unknown · Itm Agent For Macos
Name of the Vulnerable Software and Affected Versions: Insider Threat Management ITM Agent for MacOS versions prior to 7.14.3.69 Description: An improper certification validation issue could allow an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agen...
Debian: Security Advisory (DLA-3564-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-28831
The OPC UA implementations ANSI C and C++ in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by...
CVE-2023-28831
The OPC UA implementations ANSI C and C++ in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by...
Integer overflow
The OPC UA implementations ANSI C and C++ in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by...
CVE-2023-28831
The OPC UA implementations ANSI C and C++ in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by...
CVE-2023-28831
The OPC UA implementations ANSI C and C++ in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by...
PT-2023-5327 · Unknown · Ansi C Opc Ua Sdk
Name of the Vulnerable Software and Affected Versions: OPC UA implementations ANSI C and C++ affected versions not specified Description: The OPC UA implementations contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validatio...
VulnCheck KEV: CVE-2023-41991
Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation...
PT-2023-6499 · Anaconda · Miniconda +1
Name of the Vulnerable Software and Affected Versions: Anaconda 3 versions 2023.03-1-Linux Miniconda version not specified Description: The issue allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program. This occurs because many...
CVE-2023-35845
Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program. This occurs because many files are installed as world-writable on Linux, ignoring umask, even when these files are installed as root. Miniconda i...
The vulnerability of the Python programming language’s cryptography interpreter lies in errors in the certificate validation process, which allows attackers to execute a type of “man-in-the-middle” attack.
The vulnerability of the Python programming language’s cryptography interpreter is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...
Ubuntu 16.04 ESM / 18.04 ESM : curl vulnerabilities (USN-6237-3)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6237-3 advisory. USN-6237-1 fixed several vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2719)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2750)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : curl (ALAS-2023-2230)
The version of curl installed on the remote host is prior to 8.2.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2230 advisory. Integer overflow vulnerability in tooloperate.c in curl 7.65.2 via crafted value as the retry delay. CVE-2020-19909 libcurl...
The vulnerability of the Bouncy Castle cryptographic protection mechanism lies in errors during the certificate validation process, which allows attackers to disclose the protected information.
The vulnerability of the Bouncy Castle cryptographic protection mechanism is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...
Oracle Linux 7 : evolution (ELSA-2020-1080)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1080 advisory. - Update patch for RH bug 1686408 CVE-2018-15587: Reposition signature bar - Add patch for RH bug 1686408 CVE-2018-15587: Reposition signature bar - Ad...