Lucene search
K

12 matches found

OSV
OSV
added 2023/11/10 11:6 a.m.3 views

OESA-2023-1810 qt security update

Qt pronounced as "cute", not "cu-tee" is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo ...

5.3CVSS6.9AI score0.00116EPSS
Exploits0References2
NVD
NVD
added 2023/08/14 9:15 p.m.19 views

CVE-2023-21265

In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS7.3AI score0.00217EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/08/14 8:59 p.m.18 views

CVE-2023-21265

In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.7AI score0.00217EPSS
Exploits0References2
OSV
OSV
added 2022/05/24 4:46 p.m.13 views

GHSA-VFXC-R2GX-V2VQ Hybrid Group Gobot Improper Certificate Validation vulnerability

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default. Specific Go Packages Affected github.com/hybridgroup/gobot/platforms/mqtt...

7.5CVSS7.4AI score0.00155EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2022/05/24 4:46 p.m.22 views

Hybrid Group Gobot Improper Certificate Validation vulnerability

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default. Specific Go Packages Affected github.com/hybridgroup/gobot/platforms/mqtt...

7.5CVSS7.3AI score0.00155EPSS
Exploits0References6Affected Software1
Veracode
Veracode
added 2019/06/03 10:29 a.m.12 views

Weak Authentication

hybridgroup/gobot is vulnerable to weak authentication vulnerability. A remote attacker can successfully initiate an exploitation without any form of authentication which affects the functionality of the component mqtt subsystem by skiping verification of root CA certificates by default...

7.5CVSS7.5AI score0.00155EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2019/05/31 11:29 a.m.10 views

Default credentials

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default...

5CVSS7.5AI score0.00155EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/05/31 10:59 a.m.9 views

CVE-2019-12496

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default...

7.5AI score0.00155EPSS
Exploits0References2
GitLab Advisory Database
GitLab Advisory Database
added 2019/05/31 12:0 a.m.14 views

Improper Certificate Validation

An issue was discovered in Hybrid Group Gobot. The mqtt subsystem skips verification of root CA certificates by default...

7.5CVSS1.6AI score0.00155EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/05/05 12:0 a.m.69 views

SUSE SLES11 Security Update : MozillaFirefox, mozilla-nss, mozilla-nspr (SUSE-SU-2017:1175-1)

Mozilla Firefox was updated to the Firefox ESR release 45.9. Mozilla NSS was updated to support TLS 1.3 close to release draft and various new ciphers, PRFs, Diffie Hellman key agreement and support for more hashes. Security issues fixed in Firefox bsc1035082 - MFSA 2017-11/CVE-2017-5469: Potenti...

9.8CVSS8.5AI score0.23444EPSS
Exploits20References64
Tenable Nessus
Tenable Nessus
added 2015/04/14 12:0 a.m.11 views

Fedora 21 : ca-certificates-2015.2.3-1.0.fc21 (2015-4711)

This is an update to the set of CA certificates released with NSS version 3.18 However, the package modifies the CA list to keep several legacy CAs still trusted for compatibility reasons. Please refer to the project URL for details. If you prefer to use the unchanged list provided by Mozilla, an...

5.5AI score
Exploits0References3
CERT
CERT
added 2015/02/19 12:0 a.m.29 views

Komodia Redirector with SSL Digestor fails to properly validate SSL and installs non-unique root CA certificates and private keys

Overview Komodia Redirector with SSL Digestor installs non-unique root CA certificates and private keys, making systems broadly vulnerable to HTTPS spoofing Description Komodia Redirector SDK is a self-described "interception engine" designed to enable developers to integrate proxy services and w...

6.5AI score
Exploits0References16
Rows per page
Query Builder