Filtered by vendor Webroot
Subscriptions
Filtered by product Brightcloud
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-4015 | 1 Webroot | 1 Brightcloud | 2024-11-21 | 8.1 High |
| An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK. The configuration of the HTTP client does not enforce a secure connection by default, resulting in a failure to validate TLS certificates. An attacker could impersonate a remote BrightCloud server to exploit this vulnerability. | ||||
| CVE-2018-4012 | 1 Webroot | 1 Brightcloud | 2024-11-21 | N/A |
| An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_header incorrectly handles overlong headers, leading to arbitrary code execution. An unauthenticated attacker could impersonate a remote BrightCloud server to trigger this vulnerability. | ||||
Page 1 of 1.