Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 10:28 p.m.36 views

Improper Certificate Validation in Apache Netbeans

The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. "Apache NetBeans" versions up to and including 11.2 are...

9.1CVSS2.2AI score0.02007EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/03/30 7:15 p.m.6 views

DEBIAN-CVE-2019-17560

The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are...

9.1CVSS8.4AI score0.02007EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/03/30 7:15 p.m.25 views

CVE-2019-17560

The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are...

9.1CVSS7.2AI score0.02007EPSS
SaveExploits0References2
Rows per page
Query Builder