CVE-2024-49797

IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

PT-2025-6014 · Unknown · Microdicom Dicom Viewer

Name of the Vulnerable Software and Affected Versions: MicroDicom DICOM Viewer version 2024.03 Description: The issue arises from the software's failure to adequately verify the update server's certificate. This could allow attackers in a privileged network position to alter network traffic and...

PT-2025-6036 · Tp Link · Tapo C500 Wi-Fi Camera

Name of the Vulnerable Software and Affected Versions: Tapo C500 Wi-Fi camera affected versions not specified Description: This issue exists due to a hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this to obtain cryptographic private...

CVE-2024-47258

2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. 2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Fingerprint Verification. Since version 2.2...

CVE-2024-47258

2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. 2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Fingerprint Verification. Since version 2.2...

CVE-2024-47258

2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. 2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Fingerprint Verification. Since version 2.2...

CVE-2024-36553

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...

CVE-2025-0501

An issue in the native clients for Amazon WorkSpaces when running PCoIP protocol may allow an attacker to access remote sessions via man-in-the-middle...

CVE-2025-0500

An issue in the native clients for Amazon WorkSpaces when running Amazon DCV protocol, Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via man-in-the-middle...

CVE-2022-21199

An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.13620121102. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

Forever CALL ME KW-50 安全漏洞

Forever CALL ME KW-50 is a children's phone watch from Forever. A security vulnerability exists in the Forever CALL ME KW-50 version R36YDRA3PWGM7SV1.02019071516.19.24cobh, which stems from vulnerability to MITM attacks...

IBM Cognos Mobile Client Trust Management Issue Vulnerability

IBM Cognos Mobile Client is a mobile application for the IBM Cognos BI platform from International Business Machines IBM. IBM Cognos Mobile Client suffers from a trust management issue vulnerability that stems from a lack of certificate fixing, which can be exploited by an attacker to cause...

Aruba ClearPass Policy Manager 6.11.x < 6.11.10 / 6.12.x < 6.12.4 Multiple Vulnerabilities

The version of Aruba ClearPass Policy Manager installed on the remote host is prior to 6.11.10 and 6.12.4. It is, therefore, affected by multiple vulnerabilities as referenced in the HPESBNW04784 advisory. - A vulnerability in the ClearPass Policy Manager web-based management interface allows a...

CVE-2024-36553

CVE-2024-36553 affects Forever KidsWatch Call Me KW-50, specifically the R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h build. The vulnerability is described as susceptible to a Man-In-The-Middle (MITM) attack. The available connected sources corroborate MITM risk but do not provide technical d...

Amazon DCV Client <= 2023.1.6203 MITM

The version of Amazon DCV Client installed on the host is vulnerable to a man-in-the-middle vulnerability, allowing an attacker to access remote sessions. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

PT-2025-5842 · Unknown · Forever Kidswatch Call Me Kw50

Name of the Vulnerable Software and Affected Versions: Forever KidsWatch Call Me KW-50 version R36 YDR A3PW GM7S V1.0 2019 07 15 16.19.24 cob h Description: The issue concerns a Man-In-The-Middle MITM attack. A MITM attack is a type of cyber attack where an attacker intercepts and alters...

CVE-2024-36553

Forever KidsWatch Call Me KW-50 R36YDRA3PWGM7SV1.02019071516.19.24cobh is vulnerable to MITM attack...

Amazon DCV Client <= 2023.1.8993 MITM

The version of Amazon DCV Client installed on the host is vulnerable to a man-in-the-middle vulnerability, allowing an attacker to access remote sessions. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CVE-2022-32540

Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras wi...

CVE-2022-36076

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added and later checked a nonce was inadvertently rendered opt-i...