4107 matches found
CVE-2020-9432
opensslx509checkhost in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...
CVE-2020-9432
The CVE-2020-9432 issue affects lua-openssl, specifically the openssl_x509_check_host function in version 0.7.7-1. The root cause is that it mis-handles X.509 certificate validation by using lua_pushboolean for non-boolean return values, which can lead to incorrect validation results. Connected s...
CVE-2020-9432
opensslx509checkhost in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...
CVE-2020-9433
CVE-2020-9433 affects lua-openssl 0.7.7-1, where openssl_x509_check_email mishandles X.509 certificate validation because it uses lua_pushboolean for non-boolean return values. This is the stated root cause; no explicit remediation is provided in the documents. Affected/related entries in the con...
CVE-2020-9433
opensslx509checkemail in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...
CVE-2020-9433
opensslx509checkemail in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...
CVE-2020-9434
The CVE-2020-9434 issue affects lua-openssl 0.7.7-1, where openssl_x509_check_ip_asc mishandles X.509 certificate validation by returning non-boolean values through lua_pushboolean. Root cause: a mismatch in return type handling during certificate validation, leading to incorrect validation resul...
CVE-2020-9434
opensslx509checkipasc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...
CVE-2020-9434
opensslx509checkipasc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...
PT-2020-20654
Name of the Vulnerable Software and Affected Versions lua-openssl version 0.7.7-1 Description The issue is related to the mishandling of X.509 certificate validation in the openssl x509 check email function. This function uses lua pushboolean for certain non-boolean return values, which can lead ...
PT-2020-20653
Name of the Vulnerable Software and Affected Versions lua-openssl version 0.7.7-1 Description The issue is related to the mishandling of X.509 certificate validation in the openssl x509 check host function. This function uses lua pushboolean for certain non-boolean return values, which can lead t...
CVE-2020-9433: Improper Certificate Validation
opensslx509checkemail in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...
CVE-2020-9434: Improper Certificate Validation
opensslx509checkipasc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...
CVE-2020-9432: Improper Certificate Validation
opensslx509checkhost in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...
PT-2020-20655
Name of the Vulnerable Software and Affected Versions lua-openssl version 0.7.7-1 Description The issue is related to the mishandling of X.509 certificate validation in the openssl x509 check ip asc function. This function uses lua pushboolean for certain non-boolean return values, which can lead...
DrSemu - Malware Detection And Classification Tool Based On Dynamic Behavior
Dr.Semu runs executables in an isolated environment, monitors the behavior of a process, and based on Dr.Semu rules created by you or the community, detects if the process is malicious or not. whoami:@qazqaz With Dr.Semu you can create rules to detect malware based on dynamic behavior of a proces...
CVE-2013-3565
Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...
CVE-2013-3565: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...
CVE-2013-4863
The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows 1 remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or 2 remote authenticated users to execute arbitrary Lua code via a RunLua action in a request...
Design/Logic Flaw
The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows 1 remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or 2 remote authenticated users to execute arbitrary Lua code via a RunLua action in a request...