K000132539: BIG-IP Edge Client for Windows and macOS vulnerability CVE-2023-24461

Security Advisory Description An improper certificate validation vulnerability exists in BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. CVE-2023-24461 Impact An unauthenticated attacker with a man-in-the-middle MITM position may exploit this...

GLSA-202305-02 : Python, PyPy3: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-02 Python, PyPy3: Multiple Vulnerabilities - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shel...

PT-2023-19621 · F5 · Big-Ip Edge Client

Name of the Vulnerable Software and Affected Versions: BIG-IP Edge Client for Windows and macOS affected versions not specified Description: An improper certificate validation issue exists and may allow an attacker to impersonate a BIG-IP APM system. Recommendations: At the moment, there is no...

slixmpp: Insufficient Certificate Validation

Background slixmpp is a Python 3 library for XMPP. Description slixmpp does not validate hostnames in certificates used by connected servers. Impact An attacker could perform a man-in-the-middle attack on users' connections to servers with slixmpp. Workaround There is no known workaround at this...

F5 BIG-IP Edge Gateway 信任管理问题漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security bypass vulnerability exists in F5 BIG-IP Edge Client for Windows and macOS, which stems from incorrect certificate...

GLSA-202305-07 : slixmpp: Insufficient Certificate Validation

The remote host is affected by the vulnerability described in GLSA-202305-07 slixmpp: Insufficient Certificate Validation - Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp. CVE-2022-45197 Note that Ness...

CVE-2022-48186

A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclosure...

CVE-2022-48186

A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclosure...

Information disclosure

A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclosure...

CVE-2022-48186

A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclosure...

CVE-2022-48186

A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclosure...

CVE-2022-48186

Summary: CVE-2022-48186 pertains to a certificate validation vulnerability in the Baiying Android application, exposing information disclosure risk. The NVD entry assigns CVSS v3.1 base score 7.5 (HIGH) with attack vector Network, attack complexity Low, privileges required None, user interaction ...

Lenovo Baiying 信任管理问题漏洞

Lenovo Baiying is an asset management software from the Chinese company Lenovo. A security vulnerability exists in Lenovo Baiying that stems from a certificate validation vulnerability...

Oracle ODP.NET Managed Driver Improper Certificate Validation Vulnerability

This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of Oracle ODP.NET Managed Driver. An attacker must first obtain the ability to intercept and alter network traffic in order to exploit this vulnerability. The specific flaw exists withi...

PT-2023-15606 · Unknown · Baiying Android Application

Name of the Vulnerable Software and Affected Versions: Baiying Android application affected versions not specified Description: A certificate validation issue exists in the application, potentially leading to information disclosure. Recommendations: At the moment, there is no information about a...

Comprehensive Perl Archive Network 信任管理问题漏洞

The Comprehensive Perl Archive Network Cpan is a repository of over 200,000 Perl programming language modules. A security vulnerability exists in Comprehensive Perl Archive Network versions prior to 2.35, which stems from a TLS certificate not being validated during distribution via HTTPS downloa...

GitLab 信任管理问题漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab-API-v4 0.26 and earlier versions, whi...

HTTP::Tiny 信任管理问题漏洞

HTTP::Tiny is a small, simple, and correct HTTP/1.1 client from Perldoc Open Source. HTTP::Tiny suffers from a trust management issue vulnerability that stems from having an insecure default TLS configuration where users must opt-in to validate certificates...

java-11-openjdk security update

An update is available for java-11-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-11-openjdk packages provide the OpenJDK 11 Java Runtime...

java-17-openjdk security and bug fix update

An update is available for java-17-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...