Lucene search
+L

24 matches found

Fedora
Fedora
•added 2026/07/22 1:15 a.m.•17 views

[SECURITY] Fedora 43 Update: perl-Crypt-OpenSSL-X509-2.1.3-1.fc43

Crypt::OpenSSL::X509 - Perl extension to OpenSSL's X509 API...

9.1CVSS5.9AI score0.00341EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•15 views

PT-2026-59051

Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 are affected by the Validation of OpenSSL Certificate vulnerability. The default SSL context with SSL library did not check a server's X.509 certificate. Instead, the code accepte...

5.9CVSS6.4AI score0.00804EPSS
SaveExploits0References13
Snyk
Snyk
•added 2026/02/02 11:24 p.m.•7 views

Missing Validation of OpenSSL Certificate

Overview sagemaker is an Open source library for training and deploying models on Amazon SageMaker. Affected versions of this package are vulnerable to Missing Validation of OpenSSL Certificate via the global disabling of SSL certificate verification in the Triton Python backend. An attacker in a...

8.9CVSS6AI score0.00264EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/02/02 8:12 p.m.•6 views

Missing Validation of OpenSSL Certificate

Overview Affected versions of this package are vulnerable to Missing Validation of OpenSSL Certificate due to the default configuration of DefaultConfig where TLS certificate verification is disabled for outgoing storage driver communications. An attacker can intercept, decrypt, and manipulate al...

9.2CVSS5.5AI score0.00253EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/02 8:12 p.m.•8 views

Missing Validation of OpenSSL Certificate

Overview Affected versions of this package are vulnerable to Missing Validation of OpenSSL Certificate due to the default configuration of DefaultConfig where TLS certificate verification is disabled for outgoing storage driver communications. An attacker can intercept, decrypt, and manipulate al...

9.2CVSS5.5AI score0.00253EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/02 8:12 p.m.•9 views

Missing Validation of OpenSSL Certificate

Overview Affected versions of this package are vulnerable to Missing Validation of OpenSSL Certificate due to the default configuration of DefaultConfig where TLS certificate verification is disabled for outgoing storage driver communications. An attacker can intercept, decrypt, and manipulate al...

9.2CVSS5.5AI score0.00253EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/02 12:00 a.m.•1 views

CVE-2026-25060: Missing Validation of OpenSSL Certificate

OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, certificate verification is disabled by default for all storage driver communications. The TlsInsecureSkipVerify setting is default to true in the DefaultConfig function in internal/conf/config.go. This vulnerability enables...

8.1CVSS5.8AI score0.00253EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-30254

Malware in sbrugna...

9.1CVSS9AI score0.00843EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2009-0137

Malware in sbrugna...

5CVSS6.1AI score0.01078EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-2213

Malicious code in bioql PyPI...

5.9CVSS5.8AI score0.00804EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-53450

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00601EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 10:56 p.m.•18 views

CVE-2022-32253

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. Due to improper input validation, the OpenSSL certificate's password could be printed to a file reachable by an attacker...

7.5CVSS6.8AI score0.00601EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:54 p.m.•15 views

CVE-2020-9433

opensslx509checkemail in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.1CVSS7AI score0.00843EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:54 p.m.•17 views

CVE-2020-9432

opensslx509checkhost in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses luapushboolean for certain non-boolean return values...

9.1CVSS7AI score0.00843EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2009-3766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - muttssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name CN field of an X.5...

6.8CVSS7.3AI score0.01138EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•25 views

PT-2025-1383 · Openssl · Openssl

Name of the Vulnerable Software and Affected Versions: DDS affected versions not specified Description: The issue allows an attacker to compromise and gain full control of a secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS7 certificate validation. This is...

8.2CVSS7AI score0.00281EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/01 12:00 a.m.•1 views

CVE-2024-41265: Missing Validation of OpenSSL Certificate

A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequest function...

7.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/31 12:00 a.m.•1 views

CVE-2024-41253: Missing Validation of OpenSSL Certificate

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

7.1CVSS6AI score0.00122EPSS
SaveExploits0References1
NVD
NVD
•added 2022/06/14 10:15 a.m.•35 views

CVE-2022-32253

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. Due to improper input validation, the OpenSSL certificate's password could be printed to a file reachable by an attacker...

7.5CVSS0.00601EPSS
SaveExploits0References2
Prion
Prion
•added 2022/06/14 10:15 a.m.•25 views

Input validation

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. Due to improper input validation, the OpenSSL certificate's password could be printed to a file reachable by an attacker...

5CVSS7.8AI score0.00601EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder