共收录 447 条相关情报。
← 返回所有主题CVE-2026-120250
OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and u
CVE-2026-118147
Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-117681
A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatical
CVE-2026-118780
### Summary When a CA store created by `pki.createCaStore()` holds two or more certificates with the same subject name,
CVE-2026-119190
### Summary node-forge parses certificate extensions with the deprecated OIDs `2.5.29.10` and `2.5.29.13` as `basicConst
CVE-2026-118697
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted
CVE-2026-112816
Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11
CVE-2026-119559
OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows unauthenticated remote attackers
CVE-2026-92744
Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as
CVE-2026-119190
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod
CVE-2026-119189
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, nod
CVE-2026-118780
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the
CVE-2026-119118
Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to interce
CVE-2026-106036
Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS c
CVE-2026-105031
When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs(
CVE-2026-117611
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority st
CVE-2026-118682
KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing att
CVE-2026-116641
The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. Howe
CVE-2026-118040
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic
CVE-2026-87880
Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following prod