12386 matches found
mcollective Trust Management Issues Vulnerabilities
mcollective is a framework for building Server Orchestration and parallel work execution systems. A trust management issue vulnerability exists in mcollective. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An attacker could...
CloudBees Jenkins WebSphere Deployer Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . WebSphere Deployer Plugin is used in which a...
EulerOS 2.0 SP3 : openssl (EulerOS-SA-2019-2642)
According to the version of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. Th...
Input validation
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2019-19481
An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...
qpid-proton: TLS Man in the Middle Vulnerability
A cryptographic weakness was discovered in qpid-proton's use of TLS. If the qpid-proton client was used without client certificates, it would accept an anonymous cipher offered by the server. A man-in-the-middle attacker could use this to silently intercept traffic that should have been encrypted...
USN-4215-1: NSS vulnerability
It was discovered that NSS incorrectly handled certain certificates. An attacker could possibly use this issue to cause a denial of service...
Unikrn: Staging Rabbitmq instance is exposed to the internet with default credentials
Description: RabbitMQ is an open-source message-broker software sometimes called message-oriented middleware that originally implemented the Advanced Message Queuing Protocol AMQP and has since been extended with a plug-in architecture to support Streaming Text Oriented Messaging Protocol STOMP,...
NetApp Clustered Data ONTAP Trust Management Issue Vulnerability
NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. A trust management issue vulnerability exists in NetApp Clustered Data ONTAP 9.0 and later versions, which arises from the lack of an effective trust management mechanism in a...
Denial Of Service (DoS)
libopenSC is susceptible to denial of service DoS attack. The vulnerability exists because libopensc/pkcs15-prkey.c freed memory incorrectly after the failure in the function scpkcs15decodeprkdfentry, leading to mishandling of the buffer limits for CAC certificates and an application crash...
Denial Of Service (DoS)
libopenSC is vulnerable to denial of service DoS. The vulnerability exists as libopensc/card-cac1.c does not properly handle the buffer limits for CAC certificates, causing an application crash...
EulerOS 2.0 SP2 : freerdp (EulerOS-SA-2019-2455)
According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by...
CVE-2015-7542
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates...
CVE-2015-7542
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates...
UBUNTU-CVE-2015-7542
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates...