9584 matches found
CVE-2024-51774
Summary: CVE-2024-51774 affects qBittorrent prior to 5.0.1, which proceeds to use https URLs even after certificate validation errors. This creates a potential exposure to MITM-style manipulation affecting confidentiality, integrity, and availability (per CVSS 3.1: HIGH). Root cause (as stated): ...
CVE-2024-51774
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...
CVE-2024-51774
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...
CVE-2024-51774
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...
CVE-2024-51774
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...
CVE-2024-51774
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...
CVE-2024-51774: Improper Certificate Validation
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...
CVE-2024-51774
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...
CVE-2024-44020: Missing Authorization
Missing Authorization vulnerability in prasadkirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS wp-free-ssl.This issue affects WP Free SSL – Free SSL Certificate for WordPress and force HTTPS: from n/a through = 1.2.7...
Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information
A now-patched security flaw in the Opera web browser could have enabled a malicious extension to gain unauthorized, full access to private APIs. The attack, codenamed CrossBarking , could have made it possible to conduct actions such as capturing screenshots, modifying browser settings, and accou...
Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials
Overview Multiple network cameras provided by Hangzhou Hikvision Digital Technology Co., Ltd. support two Dynamic DNS services, DynDNS and NO-IP.The user can select which to use on the GUI configuration page. Both the services provide their APIs accessible via HTTP and HTTPS, but old firmware...
JVN#11779839: Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials
Multiple network cameras provided by Hangzhou Hikvision Digital Technology Co., Ltd. support two Dynamic DNS services, DynDNS and NO-IP. The user can select which to use on the GUI configuration page. Both the services provide their APIs accessible via HTTP and HTTPS, but old firmware versions of...
CVE-2024-45802 Squid Denial of Service
Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted...
CVE-2024-20408
A vulnerability in the Dynamic Access Policies DAP feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly. To exploit this vulnerability, an attacker...
CVE-2024-20408
A vulnerability in the Dynamic Access Policies DAP feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly. To exploit this vulnerability, an attacker...
Cisco Adaptive Security Appliance and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability
A vulnerability in the Dynamic Access Policies DAP feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly. To exploit this vulnerability, an attacker...
CVE-2024-20408: Improper Validation of Specified Type of Input
A vulnerability in the Dynamic Access Policies DAP feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly. To exploit this vulnerability, an attacker...
PT-2024-7457 · Cisco · Cisco Asa +1
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to improper validation of data in HTTPS POST requests...
