Lucene search
+L

5718 matches found

OSV
OSV
added 2022/12/25 6:30 a.m.3 views

GHSA-Q6CQ-M9GM-6Q2F Slixmpp lacks SSL Certificate hostname validation in XMLStream

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS5.9AI score0.00469EPSS
SaveExploits0References8
NVD
NVD
added 2022/12/25 5:15 a.m.13 views

CVE-2022-45197

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS0.00469EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/25 5:15 a.m.1 views

DEBIAN-CVE-2022-45197

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS7.3AI score0.00469EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/25 5:15 a.m.6 views

CVE-2022-45197

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS7.4AI score
SaveExploits0References5
PyPA
PyPA
added 2022/12/25 5:15 a.m.9 views

PYSEC-2022-43013

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS6.9AI score0.00469EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/12/25 5:15 a.m.6 views

PYSEC-2022-43013

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS7.1AI score0.00469EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/25 5:15 a.m.6 views

UBUNTU-CVE-2022-45197

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS5.8AI score0.00469EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/12/25 12:0 a.m.49 views

CVE-2022-45197

Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5AI score0.00469EPSS
SaveExploits0References5
FreeBSD
FreeBSD
added 2022/12/25 12:0 a.m.6 views

Slixmpp -- Lack of SSL Certificate hostname validation in XMLStream

NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp...

7.5CVSS6.8AI score0.00469EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/23 7:15 p.m.5 views

CVE-2022-45706

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS6.1AI score0.01056EPSS
SaveExploits0References2
NVD
NVD
added 2022/12/23 7:15 p.m.23 views

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS0.20185EPSS
SaveExploits1References1
NVD
NVD
added 2022/12/23 7:15 p.m.14 views

CVE-2022-45706

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS0.01056EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/23 7:15 p.m.7 views

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS5.8AI score0.20185EPSS
SaveExploits1References1
Prion
Prion
added 2022/12/23 7:15 p.m.17 views

Command injection

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

7.5CVSS9.8AI score0.20185EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/23 12:0 a.m.9 views

CVE-2022-45706

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...

8.1AI score0.01056EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/12/23 12:0 a.m.7 views

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

8.2AI score0.20185EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/23 12:0 a.m.5 views

IP-COM M50 安全漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in the IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a contained buffer overflow vulnerability via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS8.6AI score0.01056EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/12/23 12:0 a.m.29 views

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

10AI score0.20185EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/23 12:0 a.m.5 views

IP-COM M50 操作系统命令注入漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in the IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS8.3AI score0.20185EPSS
SaveExploits1References2
CVE
CVE
added 2022/12/23 12:0 a.m.47 views

CVE-2022-45711

Affected product: IP-COM M50 router, version 15.11.0.33(10768). Vulnerability: command injection via the hostname parameter in the formSetNetCheckTools function. Root cause / impact: underlying issue allows arbitrary command execution with network access, with high impact across confidentiality, ...

9.8CVSS9.7AI score0.20185EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder