Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Debian Linux
HIGH 7.5
syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not a…
Debian Linux
HIGH 7.4
When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of …
Debian Linux
CRITICAL 9.8
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for repor…
Debian Linux
MEDIUM 5.3
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always …
Debian Linux
HIGH 7.5
In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backend…
Debian Linux
MEDIUM 5.9
An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server…
Debian Linux
HIGH 7.5
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occur…
Debian Linux
HIGH 7.5
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occur…
Debian Linux
HIGH 7.5
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to…
Debian Linux
MEDIUM 5.9
In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vul…
Debian Linux
HIGH 7.5
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for repor…
Debian Linux
MEDIUM 5.3
An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocati…
Debian Linux
HIGH 7.5
An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature f…
Debian Linux
HIGH 8.1
In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificate…
Debian Linux
MEDIUM 5.5
NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when ad…
Debian Linux
HIGH 7.5
GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.
Duplicity
HIGH 7.5
duplicity 0.6.24 has improper verification of SSL certificates
Debian Linux
HIGH 7.5
nuSOAP before 0.7.3-5 does not properly check the hostname of a cert.
Debian Linux
CRITICAL 9.8
offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed proto…
Debian Linux
MEDIUM 5.9
offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle …
Debian Linux
HIGH 7.5
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.
Debian Linux
HIGH 7.4
When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle invalid responses. This allowed for r…
Debian Linux
HIGH 7.4
Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check OCSP pre-produced responses, which are lists (multi…
Debian Linux
MEDIUM 5.9
An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A speci…
Debian Linux
CRITICAL 9.8
The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback.
Debian Linux
HIGH 8.1
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by le…
Advanced Package Tool
MEDIUM 5.9
The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 L…