91892 matches found
CVE-2020-28972
A flaw was found in Salt, where the codebase was not validating the SSL/TLS certificate of the server. This flaw allows an attacker to obtain sensitive information via a man-in-the-middle attack. The highest threat from this vulnerability is to confidentiality and integrity...
CVE-2020-35662
A flaw was found in Salt where several places did not verify the SSL cert by default. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Protecting Sensitive Cardholder Data in Today’s Hyper-Connected World
The payment processing system has steadily evolved over time. Greatly amplified by the COVID-19 pandemic, the use of electronic payment systems in this economy has soared nearly overnight. With online shopping at an all-time high as consumer behaviors shift toward more convenience and flexibility...
Saltstack SaltStack Salt 信任管理问题漏洞
SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack Saltstack. The tool provides configuration management, remote execution, and other features. A security vulnerability exists in SaltStack Salt versions prior to Salt 3002.5, which stems from the fact that...
salt -- multiple vulnerabilities
SaltStack reports multiple security vulnerabilities in Salt CVE-2021-3197: The Salt-API.s SSH client is vulnerable to a shell injection by including ProxyCommand in an argument, or via sshoptions provided in an API request. CVE-2021-25281: The Salt-API does not have eAuth credentials for the...
CVE-2021-27189
The CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation...
Input validation
The CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation...
CIRA Canadian Shield iOS Application - Man-In-The-Middle SSL Certificate Vulnerability
CIRA Canadian Shield iOS Application - MITM SSL Certificate Vulnerability CVE-2021-27189 -- https://www.info-sec.ca/advisories/CIRA-Canadian-Shield.html Overview "CIRA Canadian Shield protects you from online threats such as malicious domains, phishing websites and helps to keep your personal dat...
CVE-2021-27189
The CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation...
CVE-2021-27189
CVE-2021-27189 affects the CIRA Canadian Shield iOS app prior to version 4.0.13, which lacks SSL certificate validation. Root cause: improper server certificate validation in the app, enabling potential man-in-the-middle attacks. Impact: an attacker who can perform a MITM could present a bogus ce...
Important: Red Hat Security Advisory: stunnel security update
An update for stunnel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
stunnel security update
An update is available for stunnel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Stunnel is a wrapper for network connections. It can be used to tunnel an...
ALSA-2021:0618 Important: stunnel security update
Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over an encrypted connection encrypted using SSL or TLS or to provide an encrypted means of connecting to services that do not natively support encryption. Security Fixes: stunnel: client...
RLSA-2021:0618 Important: stunnel security update
Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over an encrypted connection encrypted using SSL or TLS or to provide an encrypted means of connecting to services that do not natively support encryption. Security Fixes: stunnel: client...
Important: stunnel security update
Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over an encrypted connection encrypted using SSL or TLS or to provide an encrypted means of connecting to services that do not natively support encryption. Security Fixes: stunnel: client...
EulerOS 2.0 SP2 : perl-DBD-MySQL (EulerOS-SA-2021-1343)
According to the versions of the perl-DBD-MySQL package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service crash via...
openSUSE Security Update : mumble (openSUSE-2021-300)
This update for mumble fixes the following issues : mumble was updated to 1.3.4 : - Fix use of outdated non-existent notification icon names - Fix Security vulnerability caused by allowing non http/https URL schemes in public server list boo1182123 - Server: Fix Exit status for actions like...
USN-4738-1: OpenSSL vulnerabilities
Paul Kehrer discovered that OpenSSL incorrectly handled certain input lengths in EVP functions. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. CVE-2021-23840 Tavis Ormandy discovered that OpenSSL incorrectly handled parsing issuer...
Fortinet FortiOS SSL VPN Buffer Overflow (CVE-2018-13381)
A buffer overflow vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...