615 matches found
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...
Improper Certificate Validation
KubernetesClient is vulnerable to Improper Certificate Validation. The vulnerability is due to inadequate verification of the certificate trust chain, which allows an attacker to present a forged certificate and perform man-in-the-middle attacks or impersonate the Kubernetes API server...
Improper Certificate Validation
Dragonfly is vulnerable to Improper Certificate Validation. The vulnerability is due to the Manager’s Certificate gRPC service not verifying whether the requested IP addresses belong to the requesting peer, which allows an attacker to obtain valid TLS certificates for arbitrary IP addresses and...
Devolutions Server Improper Certificate Validation Vulnerability
Devolutions Server is a security solution for managing privileged accounts and sessions, designed to help organizations centrally store and manage sensitive information such as passwords and credentials. Devolutions Server has an improper certificate validation vulnerability that originates from...
Improper Certificate Validation
Overview org.opensearch.dataprepper.plugins:geoip-processor is a Data Prepper project: geoip-processor Affected versions of this package are vulnerable to Improper Certificate Validation in the SSL certificate validation process when the cert parameter is not explicitly provided. An attacker can...
EUVD-2025-34617
An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client UDC that could allow a user capable of intercepting network traffic to obtain encrypted application metadata, including device information, geolocation, and telemetry data...
CVE-2025-11633
A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is the function uploadfiletos3 of the file collectlogs.sh of the component HTTP Traffic Handler. The manipulation leads to improper certificate validation. The attack may be initiated remotely. The attack i...
EUVD-2021-12531
Malware in sbrugna...
EUVD-2020-1623
Malware in sbrugna...
EUVD-2018-7754
Malware in sbrugna...
EUVD-2021-12529
Malware in sbrugna...
EUVD-2020-1961
Malware in sbrugna...
EUVD-2021-12532
Malware in sbrugna...
EUVD-2020-17279
Malware in sbrugna...
EUVD-2018-1994
Malware in sbrugna...
EUVD-2017-6295
Malware in sbrugna...
EUVD-2024-46499
Malicious code in bioql PyPI...
EUVD-2022-24920
Malicious code in bioql PyPI...