Lucene search
+L

91829 matches found

CNVD
CNVD
added 2023/11/17 12:00 a.m.83 views

Fortinet FortiClient Hardcoding Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClien...

5.5CVSS7AI score0.00205EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/11/16 6:30 p.m.40 views

Missing SSL certificate validation in localstack

Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.7AI score0.00301EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/11/16 6:30 p.m.27 views

GHSA-8633-G3PH-97RP Missing SSL certificate validation in localstack

Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00301EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/11/16 6:30 p.m.32 views

HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7AI score0.00307EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2023/11/16 6:15 p.m.33 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS0.00307EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/16 6:15 p.m.6 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS5.8AI score0.00301EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/16 6:15 p.m.23 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS0.00301EPSS
SaveExploits0References1
PyPA
PyPA
added 2023/11/16 6:15 p.m.9 views

PYSEC-2023-242

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.8AI score0.00307EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/11/16 6:15 p.m.20 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/16 6:15 p.m.19 views

Design/Logic Flaw

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

4CVSS6.8AI score0.00307EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/11/16 6:15 p.m.22 views

Design/Logic Flaw

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

4CVSS6.9AI score0.00301EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2023/11/16 6:15 p.m.14 views

PYSEC-2023-243

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.8AI score0.00301EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/16 6:15 p.m.14 views

UBUNTU-CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/16 6:15 p.m.12 views

PYSEC-2023-242

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/16 12:00 a.m.10 views

HTTPie Security Vulnerability

HTTPie is a command line HTTP client. A security vulnerability exists in the HTTPie CLI version v3.2.2, which stems from a lack of SSL certificate validation, and allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.9AI score0.00307EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/11/16 12:00 a.m.17 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

6.5AI score0.00307EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/16 12:00 a.m.312 views

CVE-2023-48052

CVE-2023-48052 affects HTTPie v3.2.2, where missing SSL certificate validation enables a network-based MITM, allowing eavesdropping and compromising confidentiality and integrity. CVSS v3.1 vectors reflect network access, high impact on confidentiality and integrity, and no user interaction requi...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2023/11/16 12:00 a.m.81 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2023/11/16 12:00 a.m.11 views

CVE-2023-48054

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

6.6AI score0.00301EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/16 12:00 a.m.64 views

CVE-2023-48054

CVE-2023-48054 concerns missing SSL certificate validation in localstack v2.3.2 , enabling a man-in-the-middle eavesdropping of communications between host and server. Connected advisories confirm the same vulnerability across sources (Red Hat, Veracode, GHSA, OSV, NVD, etc.). The provided docume...

7.4CVSS7.1AI score0.00301EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder