982 matches found
Medium: python3.11-pip
Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...
CVE-2024-5921
An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...
CVE-2024-5921
CVE-2024-5921 : Palo Alto Networks GlobalProtect app suffers from insufficient certificate validation, allowing the client to connect to arbitrary servers. This can enable a local non-admin user or an attacker on the same subnet to install malicious root certificates and subsequently execute malw...
GHSA-R4PG-VG54-WXX4 vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer-fips, cert-manager-cmctl, cert-exporter, cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-istio-csr, step-issuer-fips, step-issuer, aws-privateca-issuer, cert-manager-webhook-pdns-fips, cert-exporter-fips...
CLSA-2024-1730917116 Update of ca-certificates
update to CKBI 2.70 from NSS 3.106 - updated certificates: - Certificate "GLOBALTRUST 2020" - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - Certificate "GlobalSign Root CA" - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Baltimore CyberTrust...
CGA-2XFH-QMGQ-VX5V
Bulletin has no description...
RHSA-2018:2373 Red Hat Security Advisory: redhat-certification security update
Bulletin has no description...
Criminal IP Secures PCI DSS v4.0 Certification, Enhancing Payment Security with Top-Level Compliance
Torrance, United States / California, 4th September 2024, CyberNewsWire...
CVE-2024-20453
creationtimestamp| type| source ---|---|--- 2024-08-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1350 2024-08-09 14:49:05+00:00| seen| https://t.me/truesecator/6077...
SUSE SLES12 Security Update : ca-certificates-mozilla (SUSE-SU-2024:2767-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2767-1 advisory. - Updated to 2.68 state of Mozilla SSL root CAs bsc1227525 - Added: FIRMAPROFESIONAL CA ROOT-A WEB - Distrust: GLOBALTRUST 2020 - Updated to...
CVE-2024-41069
creationtimestamp| type| source ---|---|--- 2024-07-29 17:58:16+00:00| seen| https://t.me/cvedetector/1871 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...
certstraining.com Cross Site Scripting vulnerability OBB-3948934
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
certstime.com Cross Site Scripting vulnerability OBB-3939049
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-5261
Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to conver...
CVE-2024-5261 TLS certificate are not properly verified when utilizing LibreOfficeKit
Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to conver...
CVE-2024-5261 TLS certificate are not properly verified when utilizing LibreOfficeKit
Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality through C/C++. Typically this is used by third party components to reuse LibreOffice as a library to conver...
CVE-2024-5261
Summary: CVE-2024-5261 describes an improper TLS certificate validation in LibreOfficeKit mode, where curl’s CA-verification is disabled via CURLOPT_SSL_VERIFYPEER in vulnerable LibreOffice versions. Affected product/feature: LibreOffice in LibreOfficeKit mode (used by third-party components via ...
Foxit PhantomPDF Privilege Escalation Vulnerability (Jun 2024)
Foxit PhantomPDF is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Foxit Reader Privilege Escalation Vulnerability (Jun 2024)
Foxit Reader is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...