Lucene search
+L

12388 matches found

Cvelist
Cvelist
added 2025/09/03 4:14 a.m.23 views

CVE-2025-9785 Misconfigured certificate validation with self-signed certificates for Print Deploy

PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not...

7.7CVSS0.00114EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/03 4:14 a.m.7 views

CVE-2025-9785 Misconfigured certificate validation with self-signed certificates for Print Deploy

PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not...

7.7CVSS6.4AI score0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.15 views

PT-2025-35658

Name of the Vulnerable Software and Affected Versions: PaperCut Print Deploy affected versions not specified Description: PaperCut Print Deploy, an optional component integrated with PaperCut NG/MF, is susceptible to man-in-the-middle attacks if not correctly configured with a trusted certificate...

7.7CVSS6.4AI score0.00114EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2018-1000520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed Certificates vulnerability in mbedtlssslgetverifyresult that can result i...

7.5CVSS7AI score0.00713EPSS
SaveExploits0References3
NVD
NVD
added 2025/08/29 7:15 a.m.9 views

CVE-2025-54777

Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is imported as an S/MIME Email certificate, it may cause a denial-of-service issue that disable the Web Connection feature...

5.3CVSS0.00117EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2025/08/29 12:00 a.m.21 views

August 29, 2025—KB5064081 (OS Build 26100.5074) Preview

None None...

7.8CVSS7AI score0.00502EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/29 12:00 a.m.15 views

Tenable Security Center Multiple Vulnerabilities (TNS-2025-17)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to version 6.6.0 with patch SC-202508.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2025-17 advisory. - In some modssl configurations on Apache HTTP Server...

9.1CVSS7.4AI score0.04799EPSS
SaveExploits2References10
Tenable Nessus
Tenable Nessus
added 2025/08/28 12:00 a.m.4 views

AlmaLinux 8 : python-cryptography (ALSA-2025:14553)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:14553 advisory. python-cryptography: NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Tenable has extracted the preceding description block directly from the...

7.5CVSS6.4AI score0.00985EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2019-3890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information...

8.1CVSS6.8AI score0.0099EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2019-19270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in tlsverifycrl in ProFTPD through 1.3.6b. Failure to check for the appropriate field of a CRL entry checking twice for subject, rather...

7.5CVSS6.5AI score0.01014EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-9127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Botan 2.2.0 - 2.4.0 fixed in 2.5.0 improperly handled wildcard certificates and could accept certain certificates as valid for hostnames when, under RFC 6125...

9.8CVSS8.2AI score0.0093EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/08/26 12:45 a.m.43 views

Moderate: Red Hat Security Advisory: python-cryptography security update

An update for python-cryptography is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.6AI score0.00985EPSS
SaveExploits1References2
Microsoft KB
Microsoft KB
added 2025/08/26 12:00 a.m.18 views

August 26, 2025—KB5064080 (OS Build 22631.5840) Preview

None None...

7.8CVSS7AI score0.00502EPSS
SaveExploits0
OSV
OSV
added 2025/08/25 9:48 p.m.17 views

GHSA-PW25-C82R-75MM request-filtering-agent SSRF Bypass via HTTPS Requests to 127.0.0.1

request-filtering-agent versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. Impact: Vulnerable patterns requests that should be blocked but are allowed: - https://127.0.0.1:443/api -...

6.9CVSS6.4AI score0.00458EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2025/08/25 6:11 p.m.18 views

UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats

A China-nexus threat actor known as UNC6384 has been attributed to a set of attacks targeting diplomats in Southeast Asia and other entities across the globe to advance Beijing's strategic interests. "This multi-stage attack chain leverages advanced social engineering including valid code signing...

7.6AI score
SaveExploits0
Oracle linux
Oracle linux
added 2025/08/25 12:00 a.m.14 views

kernel security update

5.14.0-570.37.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

7.3AI score0.00216EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.16 views

Fedora 41 : toolbox (2025-ab370b9ac9)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ab370b9ac9 advisory. Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum...

9CVSS8.6AI score0.03216EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2016-2562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, whic...

6.8CVSS6.8AI score0.00779EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/23 8:13 p.m.10 views

CVE-2025-55229

Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network...

5.3CVSS7AI score0.00481EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 5:32 p.m.14 views

CVE-2025-6182

The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones...

8.5CVSS6.5AI score0.00082EPSS
SaveExploits0References1
Rows per page
Query Builder