Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6...
CVE-2026-97165
Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” par
#advisory
共收录 23334 条相关情报。
← 返回所有主题Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6...
CVE-2026-100749
Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned fi
A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its...
CVE-2026-93304
A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its ClientKeyExchange. No master secret has
wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where...
CVE-2026-89133
wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly e
In all builds that make use of (D)TLS, including default builds, there is a series of conditional...
CVE-2026-15442
In all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS
When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could...
CVE-2026-89136
When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited s
A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress)...
CVE-2026-89134
A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN
A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared...
CVE-2026-89135
A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certifi
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961,...
CVE-2026-89102
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response s
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification....
CVE-2026-93302
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any
Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer,...
CVE-2026-100741
Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3
Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check...
CVE-2026-94418
Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check separately from the parse t
Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a...
CVE-2026-94419
Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a ClientSession reference of th
Heap use-after-free on read during bidirectional (D)TLS shutdown
CVE-2026-15442
In all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS
OCSP stapling v2 multi accepts non-CA chain certificates as issuers
CVE-2026-89102
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response s
NameConstraints not enforced across unconstrained intermediate CA
CVE-2026-89133
wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly e
Subject CN name-constraint check bypassed when non-DNS SAN present
CVE-2026-89134
A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN
Failed X509_verify_cert leaves unverified CA in shared CertManager
CVE-2026-89135
A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certifi
Client accepts unsolicited RawPublicKey server certificate type
CVE-2026-89136
When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited s
Trusted peer certificate match ignores public key, allowing forged CA clones
CVE-2026-93302
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any