Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2024/07/09 12:0 a.m.17 views

SUSE SLES15 / openSUSE 15 Security Update : python-docker (SUSE-SU-2024:1937-2)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1937-2 advisory. - CVE-2024-35195: Fixed missing certificate verification bsc1224788. Tenable has extracted the preceding description block...

5.6CVSS6.4AI score0.0034EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2024/06/12 12:0 a.m.20 views

openSUSE: Security Advisory for python (SUSE-SU-2024:1937-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6CVSS6.5AI score0.0034EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/08 12:0 a.m.26 views

SUSE SLES15 Security Update : python-docker (SUSE-SU-2024:1937-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1937-1 advisory. - CVE-2024-35195: Fixed missing certificate verification bsc1224788. Tenable has extracted the preceding description block directly from the...

5.6CVSS6.4AI score0.0034EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/12/07 8:29 p.m.6 views

python-scciclient: missing server certificate verification

A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle MITM attacks...

7.4CVSS5.7AI score0.00508EPSS
Exploits0References5
OSV
OSV
added 2017/05/15 6:29 p.m.2 views

CVE-2017-8939

The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9CVSS5.8AI score0.00598EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2014/10/16 12:0 a.m.2 views

PT-2014-7717 · Ntelos · Ntelos

Name of the Vulnerable Software and Affected Versions: My nTelos application version 1.1.2 Description: The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.5AI score0.00266EPSS
Exploits0References5
Rows per page
Query Builder