4444 matches found
CVE-2025-54470
This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server. In affected versions, NeuVector does not enforce TLS certificate verification when...
PT-2025-44648
Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The email server certificate verification is disabled, which allows for trivial man-in-the-middle MITM attacks. This poses a catastrophic security risk. Recommendation...
CVE-2025-54470
This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server. In affected versions, NeuVector does not enforce TLS certificate verification when...
CVE-2025-54470
Summary: CVE-2025-54470 affects NeuVector telemetry sender when the “Report anonymous cluster data” option is enabled. The root cause is failure to verify the telemetry server’s TLS certificate and hostname, enabling MITM attacks, and unbounded in-memory loading of the server response, enabling p...
CLSA-2025-1761323893 Fix CVE(s): CVE-2023-31484
SECURITY UPDATE: missing TLS certificate verification - debian/patches/fixes/CVE-2023-31484.patch: enable SSL/TLS cert checking in .../CPAN/HTTP/Client.pm - CVE-2023-31484...
EUVD-2025-35626
OpenBao is an open source identity-based secrets management system. In versions 2.2.0 to 2.4.1, OpenBao's audit log experienced a regression wherein raw HTTP bodies used by few endpoints were not correctly redacted HMAC'd. This impacts those using the ACME functionality of PKI, resulting in...
JLSEC-2025-184 libgit2 is a cross-platform, linkable library implementation of Git
libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the certificatecheck field of libgit2's gitremotecallbacks...
GHSA-7MVR-C777-76HP Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate
Summary Use of curl with the -k or --insecure flag in installer scripts allows attackers to deliver arbitrary executables via Man-in-the-Middle MitM attacks. This can lead to full system compromise, as the downloaded files are installed as privileged applications. Details The following scripts in...
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate
Summary Use of curl with the -k or --insecure flag in installer scripts allows attackers to deliver arbitrary executables via Man-in-the-Middle MitM attacks. This can lead to full system compromise, as the downloaded files are installed as privileged applications. Details The following scripts in...
EUVD-2014-7014
Malware in sbrugna...
EUVD-2014-7572
Malware in sbrugna...
EUVD-2014-5596
Malware in sbrugna...
EUVD-2014-5504
Malware in sbrugna...
EUVD-2014-5693
Malware in sbrugna...
EUVD-2014-6982
Malware in sbrugna...
EUVD-2014-5883
Malware in sbrugna...
EUVD-2014-6736
Malware in sbrugna...
EUVD-2014-6826
Malware in sbrugna...