#cwe-295

共收录 447 条相关情报。

← 返回所有主题
漏洞预警2026-06-25 发布INFO

X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslex...

CVE-2026-11999

X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access coul...

CVE-2026-46734

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulner

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authen...

CVE-2026-57289

Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostna

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-23 发布INFO

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, the daemon's git clone implementation disabled TLS ...

CVE-2026-54323

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-22 发布INFO

A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishes SSH connections to Windows worker nodes without verifyi...

CVE-2026-54100

A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-22 发布INFO

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive i...

CVE-2025-2669

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a pri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it to...

CVE-2025-71261

An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.

历史摘要 · 未重新核验 · NVD

安全公告2026-06-16 发布INFO

Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or...

CVE-2026-9259

Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-16 发布INFO

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

CVE-2026-9258

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-16 发布INFO

Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier

CVE-2026-9259

Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

CVE-2026-9258

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

In OCaml-TLS before 2.1.0, the client implementation does insufficient checks of the certificate provided by the server, which allows impersonation with certificates that are no...

CVE-2026-45388

In OCaml-TLS before 2.1.0, the client implementation does insufficient checks of the certificate provided by the server,

历史摘要 · 未重新核验 · NVD

安全公告2026-06-12 发布INFO

Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and...

CVE-2026-45170

Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS cer

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-12 发布INFO

Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk S...

CVE-2026-45170

Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS cer

历史摘要 · 未重新核验 · NVD

安全公告2026-06-11 发布INFO

Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control...

CVE-2026-45175

Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent vali

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-11 发布INFO

Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypa...

CVE-2026-45175

Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent vali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-11 发布INFO

Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.c...

CVE-2026-40992

Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail

历史摘要 · 未重新核验 · NVD

安全公告2026-06-10 发布INFO

Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps...

CVE-2026-41714

Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-10 发布INFO

Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also calling setUseSSL(true) get TLS encryption with no certifi...

CVE-2026-41714

Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered the certi...

CVE-2026-42769

Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Mana

历史摘要 · 未重新核验 · NVD