Lucene search
+L

4107 matches found

Cvelist
Cvelist
•added 2020/02/27 10:40 p.m.•39 views

CVE-2020-9432

opensslx509checkhost in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.3AI score0.00843EPSS
SaveExploits0References1
CVE
CVE
•added 2020/02/27 10:40 p.m.•96 views

CVE-2020-9432

The CVE-2020-9432 issue affects lua-openssl, specifically the openssl_x509_check_host function in version 0.7.7-1. The root cause is that it mis-handles X.509 certificate validation by using lua_pushboolean for non-boolean return values, which can lead to incorrect validation results. Connected s...

9.1CVSS9.2AI score0.00843EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/02/27 10:40 p.m.•8 views

CVE-2020-9432

opensslx509checkhost in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.3CVSS0.00843EPSS
SaveExploits0References1
CVE
CVE
•added 2020/02/27 10:40 p.m.•102 views

CVE-2020-9433

CVE-2020-9433 affects lua-openssl 0.7.7-1, where openssl_x509_check_email mishandles X.509 certificate validation because it uses lua_pushboolean for non-boolean return values. This is the stated root cause; no explicit remediation is provided in the documents. Affected/related entries in the con...

9.1CVSS9.2AI score0.00843EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/02/27 10:40 p.m.•39 views

CVE-2020-9433

opensslx509checkemail in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.3AI score0.00843EPSS
SaveExploits0References1
Mend
Mend
•added 2020/02/27 10:40 p.m.•7 views

CVE-2020-9433

opensslx509checkemail in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.3CVSS0.00843EPSS
SaveExploits0References1
CVE
CVE
•added 2020/02/27 10:39 p.m.•90 views

CVE-2020-9434

The CVE-2020-9434 issue affects lua-openssl 0.7.7-1, where openssl_x509_check_ip_asc mishandles X.509 certificate validation by returning non-boolean values through lua_pushboolean. Root cause: a mismatch in return type handling during certificate validation, leading to incorrect validation resul...

9.1CVSS9.2AI score0.00843EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/02/27 10:39 p.m.•24 views

CVE-2020-9434

opensslx509checkipasc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.3CVSS0.00843EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/02/27 10:39 p.m.•47 views

CVE-2020-9434

opensslx509checkipasc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.3AI score0.00843EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/02/27 12:00 a.m.•8 views

PT-2020-20654

Name of the Vulnerable Software and Affected Versions lua-openssl version 0.7.7-1 Description The issue is related to the mishandling of X.509 certificate validation in the openssl x509 check email function. This function uses lua pushboolean for certain non-boolean return values, which can lead ...

9.1CVSS0.00843EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/02/27 12:00 a.m.•6 views

PT-2020-20653

Name of the Vulnerable Software and Affected Versions lua-openssl version 0.7.7-1 Description The issue is related to the mishandling of X.509 certificate validation in the openssl x509 check host function. This function uses lua pushboolean for certain non-boolean return values, which can lead t...

9.1CVSS0.00843EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/27 12:00 a.m.•6 views

CVE-2020-9433: Improper Certificate Validation

opensslx509checkemail in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.1CVSS8.2AI score0.00843EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/27 12:00 a.m.•7 views

CVE-2020-9434: Improper Certificate Validation

opensslx509checkipasc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.1CVSS8.2AI score0.00843EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/27 12:00 a.m.•8 views

CVE-2020-9432: Improper Certificate Validation

opensslx509checkhost in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.1CVSS8.2AI score0.00843EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/02/27 12:00 a.m.•9 views

PT-2020-20655

Name of the Vulnerable Software and Affected Versions lua-openssl version 0.7.7-1 Description The issue is related to the mishandling of X.509 certificate validation in the openssl x509 check ip asc function. This function uses lua pushboolean for certain non-boolean return values, which can lead...

9.1CVSS0.00843EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2020/02/17 12:00 p.m.•96 views

DrSemu - Malware Detection And Classification Tool Based On Dynamic Behavior

Dr.Semu runs executables in an isolated environment, monitors the behavior of a process, and based on Dr.Semu rules created by you or the community, detects if the process is malicious or not. whoami:@qazqaz With Dr.Semu you can create rules to detect malware based on dynamic behavior of a proces...

7.2AI score
SaveExploits0References8
Mend
Mend
•added 2020/01/31 9:39 p.m.•7 views

CVE-2013-3565

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

6.1CVSS0.01583EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/31 12:00 a.m.•4 views

CVE-2013-3565: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

6.1CVSS6.5AI score0.01583EPSS
SaveExploits1References2
NVD
NVD
•added 2020/01/28 5:15 p.m.•44 views

CVE-2013-4863

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows 1 remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or 2 remote authenticated users to execute arbitrary Lua code via a RunLua action in a request...

9CVSS8.6AI score0.12184EPSS
SaveExploits10References3
Prion
Prion
•added 2020/01/28 5:15 p.m.•31 views

Design/Logic Flaw

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows 1 remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or 2 remote authenticated users to execute arbitrary Lua code via a RunLua action in a request...

9CVSS7.6AI score0.12184EPSS
SaveExploits10References3Affected Software1
Rows per page
Query Builder