https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:53:59 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-02199 cnvd-2017-02199 https://cve.radiocsirt.org/vuln/cnvd-2017-02199 https://cve.radiocsirt.org/vuln/euvd-2026-88108 EUVD-2026-88108 https://cve.radiocsirt.org/vuln/euvd-2026-88108 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9892 <p>The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses to license activation requests via a self-signed certificate. NOTE: this issue can be combined with CVE-2016-0718 to execute arbitrary code remotely as root.</p> <p>The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses to license activation requests via a self-signed certificate. NOTE: this issue can be combined with CVE-2016-0718 to execute arbitrary code remotely as root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9892 https://cve.radiocsirt.org/vuln/ghsa-3cqj-j486-jhq2 <p>The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses to license activation requests via a self-signed certificate. NOTE: this issue can be combined with CVE-2016-0718 to execute arbitrary code remotely as root.</p> <p>The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses to license activation requests via a self-signed certificate. NOTE: this issue can be combined with CVE-2016-0718 to execute arbitrary code remotely as root.</p> https://cve.radiocsirt.org/vuln/ghsa-3cqj-j486-jhq2 https://cve.radiocsirt.org/vuln/gsd-2016-9892 gsd-2016-9892 https://cve.radiocsirt.org/vuln/gsd-2016-9892 https://cve.radiocsirt.org/vuln/jvndb-2016-008013 <p>Multiple ESET products for macOS are vulnerable to improper server certificate verification (CWE-295). KOBAYASHI Yasuyuki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Multiple ESET products for macOS are vulnerable to improper server certificate verification (CWE-295). KOBAYASHI Yasuyuki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2016-008013