Lucene search
+L

12360 matches found

OSV
OSV
added 2024/08/02 11:07 a.m.5 views

OESA-2024-1925 botan2 security update

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

7.5CVSS6.7AI score0.00845EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/02 11:07 a.m.6 views

OESA-2024-1924 botan2 security update

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

7.5CVSS6.7AI score0.00845EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/01 10:15 p.m.12 views

CVE-2024-32865

Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices...

7.3CVSS5.8AI score0.00131EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/01 9:13 p.m.56 views

CVE-2024-32865 exacqVison - TLS certificate validation

Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices...

6.4CVSS0.00131EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/31 5:15 p.m.10 views

CVE-2024-6978

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...

8.8CVSS5.8AI score0.00142EPSS
SaveExploits1References1
NVD
NVD
added 2024/07/31 5:15 p.m.35 views

CVE-2024-6978

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...

8.8CVSS0.00142EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/07/31 4:56 p.m.64 views

CVE-2024-6978 Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...

5.6CVSS0.00142EPSS
SaveExploits1References1
CVE
CVE
added 2024/07/31 4:56 p.m.84 views

CVE-2024-6978

CVE-2024-6978 affects Cato Networks Windows SDP Client prior to 5.10.28. Local low-privileged user can install root certificates on the host, with potential security impact as described by multiple sources. PT-2024-38016 also notes an Improper Input Validation vulnerability enabling Command Injec...

8.8CVSS5.6AI score0.00142EPSS
SaveExploits1References1Affected Software1
The Hacker News
The Hacker News
added 2024/07/31 2:13 p.m.45 views

DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight

Certificate authority CA DigiCert has warned that it will be revoking a subset of SSL/TLS certificates within 24 hours due to an oversight with how it verified if a digital certificate is issued to the rightful owner of a domain. The company said it will be taking the step of revoking certificate...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/07/31 9:20 a.m.33 views

CVE-2024-0397

A vulnerability was found in Python. A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time that certificates are...

5CVSS7.2AI score0.0081EPSS
SaveExploits0References4
Oracle linux
Oracle linux
added 2024/07/31 12:00 a.m.65 views

kernel security update

5.14.0-427.28.14.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

7.8CVSS7.4AI score0.00975EPSS
SaveExploits0
CISA
CISA
added 2024/07/30 12:00 p.m.19 views

DigiCert Certificate Revocations

Update 9:00 a.m., EDT, July 31, 2024: DigiCert has provided updated information and revocation timelines which can be found by visiting: https://status.digicert.com/link is external CISA encourages customers to contact DigiCert if unable to reissue/rekey certificates by the updated revocation...

6.8AI score
SaveExploits0References3
Fedora
Fedora
added 2024/07/30 1:33 a.m.33 views

[SECURITY] Fedora 40 Update: curl-8.6.0-9.fc40

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

7.5CVSS7.7AI score0.04296EPSS
SaveExploits1
Imperva Blog
Imperva Blog
added 2024/07/26 4:12 p.m.92 views

Effortless certificate management with automated CNAME validation

Imperva customers who properly utilize the managed certificate feature can experience a robust, interruptions-free, and fully automated certificate management process that requires no effort for domain validations and renewals. In todays digital landscape, security is of paramount importance. One...

6.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/07/22 12:00 a.m.23 views

EulerOS 2.0 SP8 : compat-openssl (EulerOS-SA-2024-2021)

According to the versions of the compat-openssl package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack...

5.5CVSS6.4AI score0.03187EPSS
SaveExploits0References2
Fedora
Fedora
added 2024/07/20 2:26 a.m.45 views

[SECURITY] Fedora 40 Update: botan2-2.19.5-1.fc40

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

7.5CVSS7.6AI score0.00845EPSS
SaveExploits0
Imperva Blog
Imperva Blog
added 2024/07/19 6:50 p.m.8 views

On Entrust? Imperva has your back!

Managing SSL/TLS certificates is a critical yet complex task for any organization. Certificates ensure secure communication between users and your web applications, but maintaining them involves constant vigilance and expertise. From monitoring expiration dates to renewing and deploying new...

7.1AI score
SaveExploits0
Ubuntu
Ubuntu
added 2024/07/18 5:18 a.m.34 views

USN-6901-1: stunnel vulnerability

It was discovered that stunnel did not properly validate client certificates when configured to use both the redirect and verifyChain options. A remote attacker could potentially use this issue to obtain sensitive information by accessing the tunneled service...

7.5CVSS7.2AI score0.01179EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/07/16 12:00 a.m.12 views

Mageia: Security Advisory (MGASA-2024-0268)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.6AI score0.00428EPSS
SaveExploits0References5
Mageia
Mageia
added 2024/07/15 4:54 p.m.48 views

Updated libreoffice packages fix security vulnerability

TLS certificates are not properly verified when utilizing LibreOfficeKit. CVE-2024-5261...

10CVSS7.3AI score0.00428EPSS
SaveExploits0References3
Rows per page
Query Builder