Lucene search
+L

91552 matches found

EUVD
EUVD
added 2025/11/05 12:0 a.m.7 views

EUVD-2025-37933

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections...

9.1CVSS6.4AI score0.00229EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/05 12:0 a.m.20 views

CVE-2025-56231

Tonec Internet Download Manager (IDM) 6.42.41.1 and earlier is affected by a Missing SSL Certificate Validation vulnerability in the update mechanism, allowing a remote attacker to bypass update protections. Affected component is the update/SSL validation routine; root cause details are consisten...

9.1CVSS6.5AI score0.00229EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/11/05 12:0 a.m.6 views

CVE-2025-56231

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections...

9.1CVSS6AI score0.00229EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.8 views

Tencent Docs Desktop 安全漏洞

Tencent Docs Desktop is a multiplayer online collaborative document tool from Tencent China. A security vulnerability exists in Tencent Docs Desktop 3.9.20 and prior versions, which stems from a lack of SSL certificate validation in the update component...

7.5CVSS6.8AI score0.00216EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.6 views

Astra Linux – Vulnerability in Apache2

Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to log variables...

7.5CVSS7.2AI score0.00669EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/30 5:9 p.m.7 views

CVE-2025-1549

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability i...

7.8CVSS7.3AI score0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/29 4:50 p.m.37 views

CVE-2025-1549 WatchGuard Mobile VPN with SSL Local Privilege Escallation

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability i...

6.3CVSS0.00142EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/23 10:43 a.m.6 views

Malicious code in aiohttp-ssl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 212da09ca68167bc40e86f1c838fe5aeb5a6656da5ecbbdb5d17df01b2c262d8 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

7AI score
SaveExploits0References3
OSV
OSV
added 2025/10/23 10:43 a.m.4 views

MAL-2025-191618 Malicious code in aiohttp-ssl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 212da09ca68167bc40e86f1c838fe5aeb5a6656da5ecbbdb5d17df01b2c262d8 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

6.8AI score
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
added 2025/10/23 12:0 a.m.6 views

VulnCheck KEV: CVE-2023-5970

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...

8.8CVSS5.8AI score0.00911EPSS
SaveIn wildExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2025/10/23 12:0 a.m.9 views

VulnCheck KEV: CVE-2022-1703

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service DoS attack...

9CVSS6AI score0.11634EPSS
SaveIn wildExploits0References2
Mageia
Mageia
added 2025/10/22 8:7 p.m.10 views

Updated haproxy packages fix security vulnerability & bugs

Haproxy has a critical, a major, few medium and few minor bugs fixed in the last upstream version 2.8.16 of branch 2.8. Fixed critical bug list: - mjson: fix possible DoS when parsing numbers Fixed major bug list: - listeners: transfer connection accounting when switching listeners Fixed medium...

7.5CVSS7.1AI score0.0069EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/22 8:7 p.m.14 views

MGASA-2025-0242 Updated haproxy packages fix security vulnerability & bugs

Haproxy has a critical, a major, few medium and few minor bugs fixed in the last upstream version 2.8.16 of branch 2.8. Fixed critical bug list: - mjson: fix possible DoS when parsing numbers Fixed major bug list: - listeners: transfer connection accounting when switching listeners Fixed medium...

7.5CVSS6.9AI score0.0069EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2025/10/21 3:7 p.m.8 views

Security update for python313

This update for python313 fixes the following issues: Update to version 3.13.7. Fixes in 3.13.7: gh-137583: Fix a deadlock introduced in 3.13.6 when a call to ssl.SSLSocket.recv was blocked in one thread, and then another method on the object such as ssl.SSLSocket.send was subsequently called in...

7.1CVSS7.4AI score0.00611EPSS
SaveExploits0References8
OSV
OSV
added 2025/10/21 3:7 p.m.15 views

SUSE-SU-2025:3706-1 Security update for python313

This update for python313 fixes the following issues: Update to version 3.13.7. - Fixes in 3.13.7: gh-137583: Fix a deadlock introduced in 3.13.6 when a call to ssl.SSLSocket.recv was blocked in one thread, and then another method on the object such as ssl.SSLSocket.send was subsequently called i...

7.5CVSS5.8AI score0.00611EPSS
SaveExploits0References5
CNVD
CNVD
added 2025/10/17 12:0 a.m.24 views

F5 BIG-IP SSL/TLS Denial of Service Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial of service vulnerability exists in the SSL/TLS module of BIG-IP. The vulnerability arises because when the...

8.7CVSS6.7AI score0.00414EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/16 5:47 p.m.11 views

CVE-2025-62371

OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSearch sink and source plugins in Data Prepper trust all SSL certificates by default when no certificate path is provided. Prior to this fix, the OpenSearch sink and source plugin...

7.4CVSS6.6AI score0.00182EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/16 2:52 p.m.17 views

CVE-2025-61951

Undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. This issue may occur when a Datagram Transport Layer Security DTLS 1.2 virtual server is enabled with a Server SSL profile that is configured with a certificate, key, and the SSL Sign Hash set to ANY, and the backe...

8.7CVSS6.8AI score0.00224EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/16 2:51 p.m.11 views

CVE-2025-41430

When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.7CVSS6.8AI score0.00327EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/16 7:56 a.m.8 views

CVE-2025-55039

This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...

6.5CVSS6.7AI score0.00222EPSS
SaveExploits0References1
Rows per page
Query Builder