TYPE DE FAIBLESSE
CWE-300
5 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-300 (en anglais) →
CVE-2026-97866Zhonglun CloudPOS 3.0 est affecté par une faille dans son composant de mise à jour automatique. Un attaquant distant pourrait manipuler certains arguments de mise à jour pour obten…
2.9 FAIBLE
CVE-2024-50565A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.…
3.1 FAIBLE
CVE-2021-22890curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTT…
3.7 FAIBLE
CVE-2019-3981MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username an…
3.7 FAIBLE
CVE-2017-6052A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. Communication channel endpoints are not verified, which may allow a remote attacker to …
3.7 FAIBLE