19876 matches found
DEBIAN-CVE-2024-55581
When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate unless the using program specifies a TLS configuration...
UBUNTU-CVE-2024-55581
When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate unless the using program specifies a TLS configuration...
CVE-2024-55581
When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate unless the using program specifies a TLS configuration...
CVE-2024-55581
CVE-2024-55581 affects AdaCore Ada Web Server 25.0.0 when linked with GnuTLS, where AWS.Client defaults do not verify the HTTPS server certificate, enabling MITM attacks if TLS configuration is not explicitly set. Root cause: insecure defaults in AWS.Client with GnuTLS. Impact: potential compromi...
PT-2025-8751 · Adacore +2 · Ada Web Server +3
Name of the Vulnerable Software and Affected Versions: AdaCore Ada Web Server version 25.0.0 Description: The issue concerns a lack of verification of an HTTPS server's certificate in the default behaviour of AWS.Client when linked with GnuTLS, making it vulnerable to a man-in-the-middle attack...
CVE-2024-55581
Removed by vendor...
CVE-2024-55581
When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate unless the using program specifies a TLS configuration...
AdaCore Ada Web Server 安全漏洞
AdaCore Ada Web Server AdaCore AWS is an Ada library from AdaCore that facilitates the handling of HTTP requests and JSON. It is used to simplify the process of interacting with APIs. A security vulnerability exists in the AdaCore Ada Web Server version 25.0.0 release, which stems from a lack of...
Schneider Electric EcoStruxure Geo SCADA Expert Web Server Detection
Binary data schneiderelectricecostruxuregeoscadaexpertwebdetect.nbin...
CVE-2024-13869
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'uploadfiles' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with...
YI Smart Dash Camera 安全漏洞
YI Smart Dash Camera is a smart car recorder from YI. A security vulnerability exists in YI Smart Dash Camera version v3.88, which originates from improper access control of the HTTP server, allowing unrestricted file downloads, uploads, and API commands to be executed, which may result in...
PT-2025-17932
Name of the Vulnerable Software and Affected Versions Commvault Web Server versions prior to 11.36.46 Commvault Web Server versions prior to 11.32.89 Commvault Web Server versions prior to 11.28.141 Commvault Web Server versions prior to 11.20.217 Description An unspecified vulnerability in the...
EUVD-2025-4422
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'uploadfiles' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with...
USN-7282-1 tomcat7 vulnerabilities
It was discovered that Tomcat incorrectly handled being configured with HTTP PUTs enabled. A remote attacker could use this issue to upload a JSP file to the server and execute arbitrary code...
Eclipse ThreadX NetX Duo 安全漏洞
Eclipse ThreadX NetX Duo is an IPv4 and IPv6 dual network stack for Eclipse ThreadX open source. A security vulnerability exists in Eclipse ThreadX NetX Duo prior to version 6.4.2, which stems from a buffer overflow issue included in the NetX HTTP server functionality...
CVE-2024-37359
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. CWE-918 Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0...
CVE-2024-37359
Hitachi Vantara Pentaho Business Analytics Server is affected by a server-side request forgery issue due to not validating the Host header of incoming HTTP/HTTPS requests. Affected versions include Pentaho Server prior to 10.2.0.0 and 9.3.0.9, including 8.3.x. The issue allows an attacker to prov...
[SECURITY] Fedora 41 Update: nginx-1.26.3-1.fc41
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...
