Lucene search
+L

5923 matches found

NVD
NVD
•added 2024/03/21 9:15 p.m.•19 views

CVE-2024-28756

The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle MitM attacker to read and alter all network traffic between the application and the server...

5.9CVSS5.5AI score0.00211EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•8 views

CVE-2024-28756: Out-of-bounds Read

The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle MitM attacker to read and alter all network traffic between the application and the server...

5.9CVSS5.8AI score0.00211EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/03/21 12:00 a.m.•30 views

CVE-2024-28756

The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle MitM attacker to read and alter all network traffic between the application and the server...

5.9CVSS5.8AI score0.00211EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/03/21 12:00 a.m.•15 views

CVE-2024-28756

The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle MitM attacker to read and alter all network traffic between the application and the server...

5.9CVSS6.7AI score0.00211EPSS
SaveExploits1References2
CVE
CVE
•added 2024/03/21 12:00 a.m.•85 views

CVE-2024-28756

The CVE-2024-28756 entry concerns the SolarEdge mySolarEdge Android app (versions before 2.20.1). The root cause is a certificate verification issue that allows a man-in-the-middle (MitM) attacker to read and alter all network traffic between the app and its server. The impact is sensitive data e...

5.9CVSS6.6AI score0.00211EPSS
SaveExploits1References2Affected Software1
Redos
Redos
•added 2024/03/13 12:00 a.m.•29 views

ROS-2-1311

2.1311 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2024/03/13 12:00 a.m.•36 views

ROS-2-1355

2.1355 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2024/03/13 12:00 a.m.•25 views

ROS-2-1528

2.1528 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2024/03/13 12:00 a.m.•28 views

ROS-2-1557

2.1557 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2024/03/13 12:00 a.m.•16 views

ROS-2-1675

2.1675 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2024/03/13 12:00 a.m.•9 views

ROS-2-2036

2.2036 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2024/03/13 12:00 a.m.•40 views

ROS-2-871

2.871 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2024/03/13 12:00 a.m.•35 views

ROS-2-995

2.995 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
NVD
NVD
•added 2024/03/12 9:15 a.m.•40 views

CVE-2024-26288

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected...

8.7CVSS8.6AI score0.00309EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/12 9:15 a.m.•48 views

Design/Logic Flaw

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected...

4CVSS8.5AI score0.00309EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/12 8:13 a.m.•23 views

CVE-2024-26288 PHOENIX CONTACT: Lack of SSL support in CHARX Series

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected...

8.7CVSS6.9AI score0.00309EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/12 8:13 a.m.•56 views

CVE-2024-26288 PHOENIX CONTACT: Lack of SSL support in CHARX Series

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected...

8.7CVSS8.7AI score0.00309EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/12 8:13 a.m.•87 views

CVE-2024-26288

CVE-2024-26288 affects PHOENIX CONTACT CHARX SEC devices (CHARX SEC-3000, 3050, 3100, 3150) with versions 1.5.0 and earlier. The vulnerability stems from lack of encryption in MITM-enabled communications, allowing unauthenticated remote attackers to influence data exchange. Impact details in the ...

8.7CVSS8.6AI score0.00309EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/12 12:00 a.m.•10 views

CVE-2024-26288: Cleartext Transmission of Sensitive Information

An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected...

8.7CVSS5.8AI score0.00309EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/07 12:00 a.m.•23 views

MongoDB Server security vulnerabilities

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . MongoDB Server suffers from a trust management issue vulnerability that stems...

9.8CVSS6.6AI score0.005EPSS
SaveExploits0References8
Rows per page
Query Builder