98 matches found
EUVD-2021-10136
Malware in sbrugna...
EUVD-2022-3118
Malicious code in bioql PyPI...
EUVD-2023-55117
Malicious code in bioql PyPI...
EUVD-2022-4859
Malicious code in bioql PyPI...
EUVD-2025-2021
Malicious code in bioql PyPI...
EUVD-2024-21051
Malicious code in bioql PyPI...
EUVD-2022-1889
Malicious code in bioql PyPI...
EUVD-2022-2390
Malicious code in bioql PyPI...
EUVD-2024-17108
Malicious code in bioql PyPI...
EUVD-2022-4460
Malicious code in bioql PyPI...
EUVD-2023-55118
Malicious code in bioql PyPI...
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by a vulnerability that could provide weaker than expected security (CVE-2025-33142)
Summary IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by a vulnerability that could provide weaker than expected security for TLS connections. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
PT-2025-33301 · Ibm · Ibm Websphere Application Server
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: IBM WebSphere Application Server may provide weaker than expected security for TLS connections. Recommendations: At the moment, there is no information about a newer versi...
CVE-2024-31853
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.11. During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to...
Building a Quantum-Safe Internet: The IETF's Plan for TLS
Learn about the latest initiatives in post-quantum cryptography, including the IETF’s plan for securing TLS...
CVE-2024-41995
Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. If this vulnerability is exploited, the product may be affected by some known TLS1.0 and TLS1.1 vulnerabilities. As for the specific products/models/versions of MFPs and printers...
CVE-2021-3422
The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk Enterprise instances configured to index Universal Forwarder traffic. The vulnerability impacts Splunk Enterprise versions before 7.3.9, 8.0 versions before 8.0.9, and 8.1 version...
CVE-2021-23018
Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster...
CVE-2017-1000209
The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers via an arbitrary valid certificate...