JVN#11257333: Ichiran App vulnerable to improper server certificate verification

Ichiran App developed by Betrend Corporation and provided by ICHIRAN INC. is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the application Update the application t...

PT-2022-25471 · Kdiskmark +1 · Kdiskmark +1

Name of the Vulnerable Software and Affected Versions: KDiskMark versions prior to 3.1.0 Description: The issue is related to a lack of authorization checking for D-Bus methods, specifically methods such as Helper::flushPageCache. This lack of authorization could potentially allow unauthorized...

PT-2017-6851 · Inverse · Sogo

Name of the Vulnerable Software and Affected Versions: SOGo versions prior to 3.1.0 Description: A cross-site request forgery CSRF issue exists. This allows an attacker to perform unintended actions on a user's account. Recommendations: For versions prior to 3.1.0, update to version 3.1.0 or late...