362 matches found
EUVD-2014-5432
Malware in sbrugna...
EUVD-2023-31890
Malicious code in bioql PyPI...
EUVD-2022-1923
Malicious code in bioql PyPI...
EUVD-2022-3600
Malicious code in bioql PyPI...
EUVD-2023-37318
Malicious code in bioql PyPI...
EUVD-2023-37344
Malicious code in bioql PyPI...
Security Updates for Microsoft SharePoint Server Subscription Edition (July 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Server Spoofing Vulnerability. CVE-2025-49706 - Remote Code Execution Vulnerability. CVE-2025-49701 %NASLMINLEVEL 70300 C...
Security Updates for Microsoft SharePoint Server 2019 (July 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Server Spoofing Vulnerability. CVE-2025-49706 - Remote Code Execution Vulnerabilites. CVE-2025-49701, CVE-2025-49703, CVE-2025-49704...
CVE-2012-5781
Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to...
CVE-2012-5808
The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2009-3456
Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate...
USN-7417-1 libdbd-mysql-perl vulnerabilities
It was discovered that libdbd-mysql-perl did not correctly handle certain SQL queries. An attacker could possibly use this issue to cause a denial of service. CVE-2016-1249 It was discovered that libdbd-mysql-perl did not correctly handle certain memory operations, which could lead to a...
CVE-2024-41724
Improper Certificate Validation CWE-295 in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server. This issue affects all versions of Gallagher Command Centre prior to 9.20.1043...
CVE-2024-49782 IBM OpenPages improper certificate validation
IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification...
CVE-2024-49782
IBM OpenPages with Watson 8.3 and 9.0: remote attacker could spoof mail server identity over SSL/TLS due to improper certificate validation (host mismatch). Consequences include disclosure of information in email notifications or disrupted delivery. Affected: IBM OpenPages 9.0 and OpenPages with ...
2100 TECHNOLOGY Electronic Official Document Management System 安全漏洞
2100 TECHNOLOGY Electronic Official Document Management System is an electronic office document management system from 2100 TECHNOLOGY. A security vulnerability exists in 2100 TECHNOLOGY Electronic Official Document Management System versions prior to 5.0.86.9, which stems from an authentication...
CVE-2024-39767 Spoofed push notifications from malicious server
Mattermost Mobile Apps versions =2.16.0 fail to validate that the push notifications received for a server actually came from this serve that which allows a malicious server to send push notifications with another server’s diagnostic ID or server URL and have them show up in mobile apps as that...
CVE-2024-35267
CVE-2024-35267 is Azure DevOps Server Spoofing Vulnerability. Connected docs confirm a vulnerability in Azure DevOps Server enabling spoofing/impersonation of other users (CVE-2024-35267; CVSSv3 base 7.6, AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L). Microsoft’s accompanying advisories indicate updates a...
