Lucene search
K

49 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.4 views

Unity Linux 20.1060e / 20.1070e Security Update: mutt (UTSA-2026-016642)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016642 advisory. Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate. Tenable has...

5.8CVSS6.5AI score0.00692EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.3 views

wolfSSL(CyaSSL) 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the American company wolfSSL, aimed at developers working with embedded systems. wolfSSL CyaSSL contains security vulnerabilities; these vulnerabilities stem from the parsing of URI names during certificate chain...

7CVSS5.8AI score0.00023EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:0 a.m.1 views

MiracleLinux 4 : nspr-4.10.2-1.AXS4, nss-3.15.3-6.0.1.AXS4, nss-util-3.15.3-1.AXS4 (AXSA:2014-054:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-054:01 advisory. nss: Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server...

7.5CVSS8.7AI score0.03954EPSS
Exploits0References6
CVE
CVE
added 2023/12/21 11:30 a.m.48 views

CVE-2023-5594

CVE-2023-5594 describes improper validation of the server’s certificate chain in the secure traffic scanning feature, causing intermediate certificates signed with MD5 or SHA-1 to be treated as trusted. Multiple sources (NVD, CVE List, CNNVD, PRION/PRION-like entries, and EUVD) tie this to ESET s...

8.6CVSS8.1AI score0.00102EPSS
Exploits0References1Affected Software9
SUSE CVE
SUSE CVE
added 2023/02/15 6:1 a.m.1 views

SUSE CVE-2009-5138

GnuTLS before 2.7.6, when the GNUTLSVERIFYALLOWX509V1CACRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different...

5.8CVSS7.1AI score0.00847EPSS
Exploits1References8
SUSE CVE
SUSE CVE
added 2023/02/15 5:17 a.m.1 views

SUSE CVE-2015-4680

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates...

7.5CVSS7AI score0.0038EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:57 a.m.1 views

SUSE CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

4.3CVSS6.9AI score0.00692EPSS
Exploits0References12
OSV
OSV
added 2022/10/31 6:15 a.m.1 views

ALPINE-CVE-2022-40617

strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity and intermediate CA certificate that contains a CRL/OCSP URL that points to a server under the attacker's control that doesn't properly respond but for example jus...

7.5CVSS6.8AI score0.00222EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2014-0006)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.8AI score0.11056EPSS
Exploits7References14
OSV
OSV
added 2021/10/19 11:3 a.m.1 views

OESA-2021-1399 mutt security update

Mutt is a small but very powerful text-based mail client for Unix operating systems. Security Fixes: Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.CVE-2020-14154...

5.8CVSS6.9AI score0.00692EPSS
Exploits0References2
Oracle linux
Oracle linux
added 2021/05/25 12:0 a.m.79 views

curl security and bug fix update

7.61.1-18 - http: send payload when proxy authentication is done 1918692 - curl: Inferior OCSP verification CVE-2020-8286 - libcurl: FTP wildcard stack overflow CVE-2020-8285 - curl: trusting FTP PASV responses CVE-2020-8284 7.61.1-17 - validate an ssl connection using an intermediate certificate...

7.5CVSS0.9AI score0.00742EPSS
Exploits3
OSV
OSV
added 2020/06/22 2:20 p.m.1 views

USN-4401-1 mutt vulnerabilities

It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to enable MITM attacks. CVE-2020-14093 It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to proceeds with a connection even if the...

5.9CVSS6.5AI score0.03861EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2020/06/18 8:19 a.m.22 views

CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

5.8CVSS2.2AI score0.00692EPSS
Exploits0References4
OSV
OSV
added 2020/06/15 5:15 p.m.14 views

CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

4.8CVSS6.5AI score
Exploits0References7
OSV
OSV
added 2020/06/15 5:15 p.m.1 views

DEBIAN-CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

4.8CVSS6.2AI score0.00692EPSS
Exploits0References1
OSV
OSV
added 2020/06/15 5:15 p.m.0 views

UBUNTU-CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

4.8CVSS6.5AI score0.00692EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2020/06/15 4:51 p.m.26 views

CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

5.8CVSS5.6AI score0.00692EPSS
Exploits0
Citrix
Citrix
added 2018/03/05 12:0 a.m.4 views

The XenMobile server is not sending the required intermediate certificate

Whenever verifying the certificate for XenMobile on https://www.digicert.com/help/ you get the following: The server is not sending the required intermediate certificate...

7.2AI score
Exploits0
OSV
OSV
added 2017/04/05 5:59 p.m.1 views

DEBIAN-CVE-2015-4680

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates...

7.5CVSS7.6AI score0.0038EPSS
Exploits0References1
CNVD
CNVD
added 2015/07/02 12:0 a.m.1 views

FreeRADIUS Certificate Improperly Validated Revocation of Intermediate CA Certificate Vulnerability

FreeRadius is an open source based on the Radius protocol , the implementation of Radius AAA Authentication, Authorization, Accounting function of the software . FreeRadius fails to correctly detect the intermediate CA certificate , allowing remote users with an intermediate CA issued a certifica...

7.5CVSS7.2AI score0.0038EPSS
Exploits0References1
Rows per page
Query Builder