[SECURITY] [DLA 4809-1] nodejs security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4809-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 01, 2026 https://wiki.debian.org/LTS -...

Debian dla-4809 : libnode-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4809 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4809-1 [email protected]...

[SECURITY] [DSA 6517-1] nodejs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6517-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 26, 2026 https://www.debian.org/security/faq -...

Debian dsa-6517 : libnode-dev - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6517 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6517-1 [email protected] https://www.debian.org/securit...

ROS-20260129-73-0067

Vulnerability in curl related to incorrect certificate authentication. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

SSL.com security vulnerability

SSL.com is a commercial certificate issuer program from SSL.com, Inc. A security vulnerability exists in versions of SSL.com prior to 2025-04-19, which stems from improper domain name validation and could result in the issuance of an incorrect certificate...

ROS-20250110-09

Vulnerability in Erlang programming language OTP library set is related to incorrect certificate validation. certificate. Exploitation of the vulnerability allows an attacker acting remotely to perform a MitM attack...

CVE-2023-41180

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

PT-2022-2288

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Cisco Small Business RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, RV345P affected versions not specified Description The issue is...

PT-2020-20653

Name of the Vulnerable Software and Affected Versions lua-openssl version 0.7.7-1 Description The issue is related to the mishandling of X.509 certificate validation in the openssl x509 check host function. This function uses lua pushboolean for certain non-boolean return values, which can lead t...

CVE-2017-18227

TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature...

PT-2018-5191

Name of the Vulnerable Software and Affected Versions MatrixSSL version 3.7.2 Description The issue is related to an incorrect UTCTime date range validation in the X.509 certificate validation process. This results in some certificates having their expiration or beginning year extended by 100...

Weblate: Incorrect HTTPS Certificate

Weblate appears to have a public facing git repository located at git.weblate.org that utilises HTTPS when viewed in the browser. As a side note, netcat to port 80 results in the default debian landing page. 77.78.107.252 - git.weblate.org The site has an incorrectly configured certificate, and...

CVE-2017-5035: Concurrent Execution using Shared Resource with Improper Synchronization

Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site...

PT-2017-16272

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Description The issue is related to a race condition that could cause the browser to display incorrect certificate information for a site. This could potentially allow attackers to display incorrect...

Debian DSA-3700-1 : asterisk - security update

Multiple vulnerabilities have been discovered in Asterisk, an open source PBX and telephony toolkit, which may result in denial of service or incorrect certificate validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Android vulnerability where an incorrect SSL certificate is displayed

Overview Android OS contains a vulnerability where an incorrect SSL certificate is displayed. Android OS contains a vulnerability where a SSL certificate from an outside site is displayed when a user attempts to display a SSL certificate from a site that reads in contents from an outside site...

Incorrect Certificate Validation in Java Secure Socket Extension

According to SUN it has been reported that: "the Java Secure Socket Extension JSSE may incorrectly validate the digital certificate of a web site. This may result in untrustworthy web sites being authenticated for SSL transactions. The Java Plug-in and Java Web Start may incorrectly validate the...