CVE-2017-1000097

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate...

CVE-2017-1000097

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate...

AZL-79076 CVE-2017-1000097 affecting package golang 1.25.7-1

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate...

CVE-2017-1000097

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate...

Code injection

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate...

CVE-2017-1000097

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate...

CVE-2017-1000097

CVE-2017-1000097 affects Go on Darwin where root-trust preferences in the Keychain are ignored; a Go program could verify a TLS connection using a root certificate that is explicitly not trusted. The connected records (e.g., OSV GO-2022-0171) confirm this misbehavior in crypto/x509 on Darwin and ...

CVE-2017-10143

CVE-2017-10143 concerns Oracle E-Business Suite’s Oracle CRM Technical Foundation (Preferences subcomponent). Affected are EBS versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the CRM Technical Fou...

Oracle CRM Technical Foundation Remote Vulnerability (CNVD-2017-26283)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...

CVE-2017-2642

Moodle 3.x has user fullname disclosure on the user preferences page...

CVE-2017-2642

Moodle 3.x has user fullname disclosure on the user preferences page...

CVE-2017-2642

Moodle 3.x has user fullname disclosure on the user preferences page...

UBUNTU-CVE-2017-2642

Moodle 3.x has user fullname disclosure on the user preferences page...

Design/Logic Flaw

Moodle 3.x has user fullname disclosure on the user preferences page...

CVE-2017-2642

Moodle 3.x has user fullname disclosure on the user preferences page...

CVE-2017-2642

CVE-2017-2642 affects Moodle 3.x, causing a user fullname disclosure on the user preferences page. The incident is supported by multiple feeds in connected data, including CVE reporting and OpenVAS/Nessus entries that reference Moodle moodle 3.x and the associated Fedora updates. CVSS metrics ind...

The vulnerability of the software for organizing collaborative work among users in Horde Groupware allows a hacker to break the encryption of emails.

The vulnerability of the Horde Groupware software for organizing collaborative work among users is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a malicious actor, who must act remotely and who is a verified user of Horde Webmail and has access to PG...

Simple Vulnerability Remediation Collaboration with InsightVM

Many security groups today use ticketing systems that were originally designed for IT or developers, and are usually ill-suited to their vulnerability management needs. Even more commonly, teams simply rely on spreadsheets and unwieldy reports. On the other end of the spectrum, some security team...

thunderbird security update

52.1.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.1.0-1 - Update to 52.1.0 52.0.1-1 - Update to 52.0.1...

Ultrasonic Beacons Are Tracking Your Every Movement

More than 200 Android mobile applications listen surreptitiously for ultrasonic beacons embedded in audio that are used to track users and serve them with targeted advertising. Academics from Technische Universitat Braunschweig in Germany recently published a paper in which they describe their...