Cyber Security Daily Radar

#cwe-295

共收录 447 条相关情报。

← 返回所有主题
漏洞预警2026-08-03 发布INFO

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is ...

CVE-2026-18089

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-em

历史摘要 · 未重新核验 · NVD

#cve#cwe-295#cwe-347
漏洞预警2026-08-03 发布INFO

eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is not authenticated or integrity-protected. On each launch ...

CVE-2026-0392

eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is

历史摘要 · 未重新核验 · NVD

#cve#cwe-295#cwe-347#cwe-494
安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the...

CVE-2026-58062

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This i

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-295#severity:critical
安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and...

CVE-2026-8763

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-295#severity:critical
漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73....

CVE-2026-58062

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This i

历史摘要 · 未重新核验 · NVD

#cve#cwe-295
安全公告2026-08-03 发布INFO

Stapled OCSP response accepted without binding to the checked certificate

CVE-2026-58062

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This i

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-295
漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bou...

CVE-2026-8763

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also a

历史摘要 · 未重新核验 · NVD

#cve#cwe-295
安全公告2026-08-03 发布INFO

Name Constraints bypass via trailing dot in rfc822Name and URI

CVE-2026-8763

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also a

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-295
安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity...

CVE-2026-66402

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-295#severity:critical
安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname...

CVE-2026-67293

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-295#severity:critical
安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer...

CVE-2026-67294

FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client-si

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-295#severity:critical
漏洞预警2026-08-01 发布INFO

FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client-side server TLS authentication. In x509_utils_verify(), whe...

CVE-2026-67294

FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client-si

历史摘要 · 未重新核验 · NVD

#cve#cwe-295
漏洞预警2026-08-01 发布INFO

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfree...

CVE-2026-67293

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability.

历史摘要 · 未重新核验 · NVD

#cve#cwe-295
漏洞预警2026-08-01 发布INFO

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in tls_verify_certificate(), tls_match_hostname(), and x509_...

CVE-2026-66402

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in

历史摘要 · 未重新核验 · NVD

#cve#cwe-295
安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 TLS Certificate EKU Bypass

CVE-2026-67294

FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client-si

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-295
安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass

CVE-2026-66402

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-295
安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 Improper Certificate Hostname Validation

CVE-2026-67293

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability.

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-295
安全公告2026-07-31 发布INFO

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible (EDA). An unauthentic

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-295#severity:high
漏洞预警2026-07-31 发布INFO

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible (EDA). An unauthenticated remote attacker can bypass mutual Transport Layer Se...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible (EDA). An unauthentic

历史摘要 · 未重新核验 · NVD

#cve#cwe-295
漏洞预警2026-07-29 发布INFO

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacen...

CVE-2026-8497

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0

历史摘要 · 未重新核验 · NVD

#cve#cwe-295