Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 9

Количество 9

fstec логотип

BDU:2024-07771

около 2 лет назад

Уязвимость пакета для проверки надежности сертификатов SSL Certifi, связанная с недостаточной проверкой подлинности данных, позволяющая нарушителю оказать влияние на целостность защищаемой информации

CVSS3: 7.5
EPSS: Низкий
redos логотип

ROS-20241001-11

почти 2 года назад

Уязвимость ca-certificates

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2024-39689

около 2 лет назад

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2024-39689

около 2 лет назад

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2024-39689

около 2 лет назад

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2024-39689

11 месяцев назад

Certifi removes GLOBALTRUST root certificate

EPSS: Низкий
debian логотип

CVE-2024-39689

около 2 лет назад

Certifi is a curated collection of Root Certificates for validating th ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-248v-346w-9cwc

около 2 лет назад

Certifi removes GLOBALTRUST root certificate

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2643-1

около 1 месяца назад

Security update for aws-iam-authenticator

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2024-07771

Уязвимость пакета для проверки надежности сертификатов SSL Certifi, связанная с недостаточной проверкой подлинности данных, позволяющая нарушителю оказать влияние на целостность защищаемой информации

CVSS3: 7.5
1%
Низкий
около 2 лет назад
redos логотип
ROS-20241001-11

Уязвимость ca-certificates

CVSS3: 7.5
1%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

CVSS3: 7.5
1%
Низкий
около 2 лет назад
redhat логотип
CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

CVSS3: 3.7
1%
Низкий
около 2 лет назад
nvd логотип
CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

CVSS3: 7.5
1%
Низкий
около 2 лет назад
msrc логотип
CVE-2024-39689

Certifi removes GLOBALTRUST root certificate

1%
Низкий
11 месяцев назад
debian логотип
CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating th ...

CVSS3: 7.5
1%
Низкий
около 2 лет назад
github логотип
GHSA-248v-346w-9cwc

Certifi removes GLOBALTRUST root certificate

1%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2026:2643-1

Security update for aws-iam-authenticator

около 1 месяца назад

Уязвимостей на страницу