#cwe-295

共收录 447 条相关情报。

← 返回所有主题
漏洞预警2026-04-28 发布INFO

Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between the client...

CVE-2025-10539

Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can p

历史摘要 · 未重新核验 · NVD

安全公告2026-04-28 发布INFO

Spring Boot's Cassandra auto-configuration does not perform hostname verification when...

CVE-2026-40974

Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform...

CVE-2026-40971

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification w

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6...

CVE-2026-40974

Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker. Affected: Spring ...

CVE-2026-40971

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server. Affecte...

CVE-2026-40970

When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verificat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description:  In production depl...

CVE-2026-40557

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected

历史摘要 · 未重新核验 · NVD