Lucene search
+L

8146 matches found

Tenable Product Security Advisories
Tenable Product Security Advisories
added 2021/02/02 6:59 p.m.56 views

[R1] Nessus AMI 8.13.1 Fixes One Vulnerability

Nessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack...

4.8AI score
SaveExploits0
Snyk
Snyk
added 2021/01/29 5:15 a.m.7 views

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation. DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior sending an ED22519, ED448, ECC, or RSA signature without the corresponding...

8.1CVSS6.8AI score0.00793EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/01/29 12:00 a.m.29 views

CentOS 8 : dovecot (CESA-2019:3467)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3467 advisory. - dovecot: Improper certificate validation CVE-2019-3814 Note that Nessus has not tested for this issue but has instead relied only on the application's...

7.7CVSS6.5AI score0.02417EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2021/01/28 6:56 p.m.145 views

CVE-2020-24025

A flaw was found in nodejs-node-sass. Certificate validation is disabled when requesting binaries even if the user is not specifying an alternative download path...

5.3CVSS3.1AI score0.0082EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/01/27 12:00 a.m.15 views

Backblaze Trust Management Issues Vulnerabilities

Backblaze is a cloud backup service from Backblaze, Inc. in the United States. A trust management issue vulnerability exists in Backblaze for Windows prior to 7.0.1.433 and Backblaze for macOS prior to 7.0.1.434, which stems from suffering improper certificate validation in the bztransmit helper...

9.3CVSS7.5AI score0.04658EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2021/01/26 6:15 p.m.4 views

CVE-2020-5452

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none...

5.2AI score
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.13 views

Elecom ELECOM WRC-300FEBK-S 信任管理问题漏洞

The ELECOM WRC-300FEBK-S is a network camera for the home from Elecom Japan. A certificate validation error vulnerability exists in the ELECOM WRC-300FEBK-S, which can be exploited by an attacker to alter the communication response and execute arbitrary commands on the product...

5.8CVSS6.1AI score0.00331EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/01/21 12:00 a.m.13 views

Cisco Data Center Network Manager Certificate Validation Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A certificate validation vulnerability exists in Cisco Data Center Network Manager...

7.5CVSS6.5AI score0.00399EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/21 12:00 a.m.13 views

Cisco Data Center Network Manager Certificate Validation Vulnerability (CNVD-2021-09939)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A certificate validation vulnerability exists in Cisco Data Center Network Manager...

7.5CVSS6.1AI score0.00399EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/20 8:15 p.m.7 views

CVE-2021-1277

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

6.5CVSS6.6AI score0.00399EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/20 8:15 p.m.11 views

CVE-2021-1276

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

6.5CVSS6.6AI score0.00399EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/20 8:15 p.m.25 views

CVE-2021-1277

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

7.5CVSS7.4AI score0.00399EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/20 8:15 p.m.20 views

CVE-2021-1276

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

7.5CVSS7.4AI score0.00399EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/20 8:15 p.m.25 views

Design/Logic Flaw

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

5.8CVSS6.3AI score0.00399EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/01/20 8:15 p.m.30 views

Design/Logic Flaw

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

5.8CVSS6.3AI score0.00399EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/20 7:56 p.m.38 views

CVE-2021-1276 Cisco Data Center Network Manager Certificate Validation Vulnerabilities

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

7.5CVSS7.5AI score0.00399EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/20 7:56 p.m.62 views

CVE-2021-1276

Cisco Data Center Network Manager (DCNM) contains certificate-validation vulnerabilities that arise when establishing HTTPS connections, due to insufficient certificate validation. These flaws could allow an attacker to spoof a trusted host or mount a man-in-the-middle to extract sensitive inform...

7.5CVSS6.6AI score0.00399EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/01/20 7:56 p.m.7 views

CVE-2021-1276 Cisco Data Center Network Manager Certificate Validation Vulnerabilities

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

7.5CVSS6.5AI score0.00399EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/01/20 7:56 p.m.13 views

CVE-2021-1277 Cisco Data Center Network Manager Certificate Validation Vulnerabilities

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

7.5CVSS6.5AI score0.00399EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/01/20 4:00 p.m.107 views

Cisco Data Center Network Manager Certificate Validation Vulnerabilities

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when...

7.5CVSS7.1AI score0.00875EPSS
SaveExploits0References1
Rows per page
Query Builder