91865 matches found
CVE-2022-24447
An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the level Operator, to access stored SSL certificates and associated key pairs during export...
CVE-2022-24447
CVE-2022-24447 affects Zoho ManageEngine Key Manager Plus
ssl.shibamasa.com Improper Access Control vulnerability OBB-2388897
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-23222
Removed by vendor...
ZOHO ManageEngine Key Manager Plus 信息泄露漏洞
ZOHO ManageEngine Key Manager Plus is a web-based SSH secret key management solution from ZOHO. The vulnerability is caused by the application not effectively protecting the stored SSL certificates and associated key pairs, which can be exploited by an attacker to obtain the stored SSL certificat...
CVE-2021-23222
CVE-2021-23222 is a MITM-related issue where a attacker can inject false responses to a client’s first queries, despite TLS verification, in PostgreSQL-related components. Connected advisories (Astra Linux; Amazon Linux 2 ALAS2POSTGRESQL12-2024-008/009/003) confirm the impact on postgresql/libpq ...
CVE-2021-23222
A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption...
PT-2022-16704 · Zoho · Zoho Manageengine Admanager Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Key Manager Plus versions prior to 6200 Description: An issue was discovered in the application where a service allows a user with the level Operator to access stored SSL certificates and associated key pairs during export...
CVE-2021-23222
A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption...
EulerOS 2.0 SP5 : postgresql (EulerOS-SA-2022-1281)
According to the versions of the postgresql packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client...
Improper Resolution of Path Equivalence
DESCRIPTION Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection in an unsafe way. An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain. This behavior can be...
WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 4.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 4.0.4. Solution Update the WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the latest...
WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 1.1.0. Solution Update the WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the late...
WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 4.0.4 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 4.0.4. Solution Update the WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the latest available version at least...
WordPress Awesome SSL plugin <= 1.7.8 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Awesome SSL plugin versions = 1.7.8. Solution No patched version available...
WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 1.1.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 1.1.0. Solution Update the WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the latest available version at...
WordPress WP Free SSL – Free SSL Certificate for WordPress and force HTTPS plugin < 1.2.7 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress WP Free SSL – Free SSL Certificate for WordPress and force HTTPS plugin versions 1.2.7. Solution Update the WordPress WP Free SSL – Free SSL Certificate for WordPress and force HTTPS plugin to the latest available version at...
WordPress WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to fix Insecure Content plugin < 5.7.11 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to fix Insecure Content plugin versions 5.7.11. Solution Update the WordPress WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to fix...
WordPress Awesome SSL plugin <= 1.7.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Awesome SSL plugin versions = 1.7.8. Solution No patched version available...
WordPress WP Free SSL – Free SSL Certificate for WordPress and force HTTPS plugin < 1.2.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Free SSL – Free SSL Certificate for WordPress and force HTTPS plugin versions 1.2.7. Solution Update the WordPress WP Free SSL – Free SSL Certificate for WordPress and force HTTPS plugin to the late...