Lucene search
+L

8131 matches found

OSV
OSV
added 2021/10/18 9:15 a.m.1 views

DEBIAN-CVE-2021-41611

An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allows a remote server to obtain security trust well improperly. This indication of trust may be pass...

7.5CVSS7AI score0.02948EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/18 9:15 a.m.18 views

CVE-2021-41611

An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allows a remote server to obtain security trust well improperly. This indication of trust may be pass...

7.5CVSS0.02948EPSS
SaveExploits0References4
CVE
CVE
added 2021/10/18 8:56 a.m.152 views

CVE-2021-41611

CVE-2021-41611 affects Squid 5.0.6 through 5.1.x before 5.2. During origin/peer certificate validation, Squid may misclassify certain certificates as trusted, potentially allowing a remote server to extend trust to clients and enable access to unsafe or hijacked services. The vulnerability’s CVSS...

7.5CVSS7.2AI score0.02948EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/10/17 12:00 a.m.33 views

Debian DSA-4988-1 : libreoffice - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4988 advisory. Two security issues have been discovered in LibreOffice's support for digital signatures in ODF documents, which could result in incorrect signature...

7.5CVSS7AI score0.00733EPSS
SaveExploits0References7
Prion
Prion
added 2021/10/13 9:15 a.m.18 views

Code injection

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate...

5.8CVSS6.9AI score0.00486EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2021/10/13 8:29 a.m.22 views

Insecure Certificate Validation

globalpayments/php-sdk is vulnerable to insecure certificate validation. The vulnerability exists in the sendRequest function in Gateway.php as it does not properly enforce the SSL certificate validations...

5.9CVSS1.9AI score0.00976EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2021/10/12 4:31 p.m.33 views

Improper Certificate Validation in Heartland & Global Payments PHP SDK

Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations...

5.9CVSS1.1AI score0.00976EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2021/10/12 2:15 p.m.8 views

DEBIAN-CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS6.7AI score0.00708EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/12 2:15 p.m.26 views

CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS0.00708EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/12 2:15 p.m.6 views

UBUNTU-CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS6.9AI score0.00708EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2021/10/12 2:15 p.m.35 views

CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS7AI score0.00708EPSS
SaveExploits0References4
Prion
Prion
added 2021/10/12 2:15 p.m.21 views

Input validation

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

5CVSS5.9AI score0.00708EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2021/10/12 1:33 p.m.206 views

CVE-2021-25634

Summary: CVE-2021-25634 is a LibreOffice vulnerability described as an Improper Certificate Validation issue that allows an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp, which LibreOffice may incorrectly treat as valid. The issue affects The Do...

7.5CVSS6AI score0.00708EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/10/12 1:33 p.m.27 views

CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS6.2AI score0.00708EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/10/12 1:33 p.m.48 views

CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS6.2AI score0.00708EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/10/12 1:33 p.m.44 views

CVE-2021-25634 Timestamp Manipulation with Signature Wrapping

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

6.2AI score0.00708EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2021/10/12 9:02 a.m.76 views

Digital Signature Spoofing Flaws Uncovered in OpenOffice and LibreOffice

The maintainers of LibreOffice and OpenOffice have shipped security updates to their productivity software to remediate multiple vulnerabilities that could be weaponized by malicious actors to alter documents to make them appear as if they are digitally signed by a trusted source. The list of the...

7.5CVSS2.1AI score0.01502EPSS
SaveExploits0
Mageia
Mageia
added 2021/10/12 6:56 a.m.57 views

Updated libreoffice packages fix security vulnerability

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS4.1AI score0.00733EPSS
SaveExploits0References4
OSV
OSV
added 2021/10/12 6:56 a.m.18 views

MGASA-2021-0471 Updated libreoffice packages fix security vulnerability

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS7.4AI score0.00733EPSS
SaveExploits0References5
OSV
OSV
added 2021/10/11 5:15 p.m.8 views

CVE-2021-25633

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS7.4AI score
SaveExploits0References2
Rows per page
Query Builder