https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:11:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-196412 EUVD-2026-196412 https://cve.radiocsirt.org/vuln/euvd-2026-196412 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6055 <p>A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate website certificates. Specifically, if a site certificate lacks the &#34;Server Authentication&#34; specification in the Extended Key Usage extension, the product does not verify the certificate&#39;s compliance with the site, deeming such certificates as valid. This flaw could allow an attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and potentially altering communications between the user and the website.</p> <p>A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate website certificates. Specifically, if a site certificate lacks the &#34;Server Authentication&#34; specification in the Extended Key Usage extension, the product does not verify the certificate&#39;s compliance with the site, deeming such certificates as valid. This flaw could allow an attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and potentially altering communications between the user and the website.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6055 https://cve.radiocsirt.org/vuln/ghsa-xh6r-vr44-6r8x <p>A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate website certificates. Specifically, if a site certificate lacks the &#34;Server Authentication&#34; specification in the Extended Key Usage extension, the product does not verify the certificate&#39;s compliance with the site, deeming such certificates as valid. This flaw could allow an attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and potentially altering communications between the user and the website.</p> <p>A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate website certificates. Specifically, if a site certificate lacks the &#34;Server Authentication&#34; specification in the Extended Key Usage extension, the product does not verify the certificate&#39;s compliance with the site, deeming such certificates as valid. This flaw could allow an attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and potentially altering communications between the user and the website.</p> https://cve.radiocsirt.org/vuln/ghsa-xh6r-vr44-6r8x https://cve.radiocsirt.org/vuln/gsd-2023-6055 gsd-2023-6055 https://cve.radiocsirt.org/vuln/gsd-2023-6055 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3235 <p>Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Bitdefender Total Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Bitdefender Total Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3235