Lucene search
+L

7672 matches found

CNVD
CNVD
added 2024/12/06 12:00 a.m.36 views

Dell NetWorker Management Console Trust Management Issues Vulnerability

Dell NetWorker Management Console is a backup and recovery software from Dell USA. A trust management issue vulnerability exists in Dell NetWorker Management Console version 19.11, which stems from the presence of improper cryptographic signature validation, and can be exploited by an attacker to...

7.8CVSS7.1AI score0.00126EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/12/06 12:00 a.m.46 views

IBM Cognos Controller Trust Management Issues Vulnerability (CNVD-2024-47517)

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. A trust management issue vulnerability exists in IBM...

7.5CVSS6.3AI score0.00253EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/05 11:13 p.m.46 views

CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...

3.8CVSS0.00156EPSS
SaveExploits1References2
CVE
CVE
added 2024/12/05 11:13 p.m.109 views

CVE-2024-6219

CVE-2024-6219 affects LXD when running in PKI mode prior to 5.21.1. A restricted client certificate can be added to the trust store and have its restrictions ignored, granting full access to the server. Root cause: PKI mode did not honor core.trust_ca_certificates during CA-signed authentication,...

3.8CVSS4.3AI score0.00156EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/05 11:13 p.m.5 views

CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...

3.8CVSS6.7AI score0.00156EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2024/12/05 11:13 p.m.77 views

CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...

3.8CVSS5.2AI score0.00156EPSS
SaveExploits1
OSV
OSV
added 2024/12/05 11:13 p.m.10 views

CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...

3.8CVSS7AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2024/12/05 11:11 p.m.17 views

CVE-2024-6156

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...

3.8CVSS5.2AI score0.00158EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2024/12/05 11:11 p.m.10 views

CVE-2024-6156

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...

3.8CVSS6.8AI score0.00158EPSS
SaveExploits1References2
CVE
CVE
added 2024/12/05 11:11 p.m.97 views

CVE-2024-6156

The CVE-2024-6156 entry applies to LXD in PKI mode. Affected component: LXD’s PKI mode TLS listener (ClientAuth set to TLSRequestClientCert). Root cause: when a client certificate is present in the trust store, a TLS handshake can bypass PKI restrictions and authenticate a non-CA-signed client in...

3.8CVSS4.4AI score0.00158EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2024/12/05 12:00 a.m.8 views

LXD 安全漏洞

LXD is a Canonical open source container for managing applications on Linux-based systems. A security vulnerability exists in LXD versions prior to 5.21.2 that stems from the ability to bypass PKI mode if a client's certificate exists in a trust store...

3.8CVSS6.3AI score0.00158EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/12/05 12:00 a.m.9 views

LXD 安全漏洞

LXD is a Canonical open source container for managing applications on Linux-based systems. A security vulnerability exists in LXD versions prior to 5.21.1 that stems from the fact that restricted certificates can be added to the trust store without their restrictions being adhered to...

3.8CVSS6.3AI score0.00156EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/12/05 12:00 a.m.13 views

Erlang/OTP 信任管理问题漏洞

Erlang/OTP is an Erlang/OTP open source library written in JavaScript that handles handling exceptions. The library can catch exceptions raised by the node.js built-in API. A trust management issue vulnerability exists in Erlang/OTP OTP-25.3.2.8 version, OTP-26.2 version, and OTP-27.0 version,...

5.5CVSS5.4AI score0.00251EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/03 12:00 a.m.7 views

Dell NetWorker Management Console 安全漏洞

Dell NetWorker Management Console is a backup and recovery software from Dell USA. A trust management issue vulnerability exists in Dell NetWorker Management Console version 19.11, which stems from the presence of improper cryptographic signature validation, and can be exploited by an attacker to...

7.8CVSS7.3AI score0.00126EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/03 12:00 a.m.15 views

IBM Cognos Controller 信任管理问题漏洞

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. A trust management issue vulnerability exists in IBM...

7.5CVSS6.4AI score0.00253EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:00 a.m.6 views

PT-2024-37461

Name of the Vulnerable Software and Affected Versions: LXD versions prior to 5.21.1 Description: A restricted certificate could be added to the trust store with its restrictions not honoured in LXD's PKI mode. This occurs when the core.trust ca certificates configuration option is disabled, causi...

8.1CVSS7.6AI score0.03027EPSS
SaveExploits3References40
Positive Technologies
Positive Technologies
added 2024/12/02 12:00 a.m.9 views

PT-2024-37418

Name of the Vulnerable Software and Affected Versions: LXD versions 4.0 through 5.21.1 Description: A security issue was discovered in LXD's PKI mode, where a client's certificate could be used to bypass authentication if the certificate is present in the trust store, even if it is not signed by ...

8.1CVSS7.6AI score0.03027EPSS
SaveExploits3References44
HackRead
HackRead
added 2024/12/01 12:38 a.m.11 views

Top AI Trends of 2025 Businesses Should Be Ready For

AI is transforming business in 2025, from hyper-personalization to ethical AI. Success lies in mastering it to enhance innovation, efficiency, and trust while staying competitive...

7.3AI score
SaveExploits0
CNNVD
CNNVD
added 2024/11/29 12:00 a.m.21 views

IBM Security Verify Access 信任管理问题漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

9.8CVSS9AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/29 12:00 a.m.11 views

IBM Security Verify Access 信任管理问题漏洞

IBM Security Verify AccessAppliance is a Web appliance-based security solution that provides access control and protection against Web-based threats. A hard-coded vulnerability exists in the IBM Security Verify Access Appliance, which can be exploited by remote attackers to submit a special reque...

9.8CVSS6.6AI score0.00317EPSS
SaveExploits0References1
Rows per page
Query Builder