#cwe-295
共收录 447 条相关情报。
← 返回所有主题 漏洞预警2026-10-12 发布INFO
CVE-2026-103503
Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and h
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-103502
Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-78020
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validat
历史摘要 · 未重新核验 · NVD
安全公告2026-10-09 发布INFO
CVE-2026-96207
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-84032
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-08 发布INFO
CVE-2026-96207
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-08 发布INFO
CVE-2026-84032
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-08 发布INFO
CVE-2026-107318
@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-08 发布LOW
CVE-2026-88648
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to by
来源摘录 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-63697
Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privile
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-67270
Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability
历史摘要 · 未重新核验 · NVD
安全公告2026-10-06 发布INFO
CVE-2026-105794
# Summary
Improper TLS hostname verification allows a man-in-the-middle (MITM) attack on MsQuic.
# Details
Only MsQu
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-06 发布INFO
CVE-2026-105794
MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20,
历史摘要 · 未重新核验 · NVD
安全公告2026-10-05 发布INFO
CVE-2026-103921
## Impact
`buildWSLegacyExecutor()` in `@graphql-tools/executor-legacy-ws` previously hardcoded `rejectUnauthorized: fa
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-05 发布INFO
CVE-2026-105223
maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-05 发布INFO
CVE-2026-105223
maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco
历史摘要 · 未重新核验 · NVD
安全公告2026-10-05 发布INFO
CVE-2026-105223
maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-10-05 发布INFO
CVE-2026-105222
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-05 发布INFO
CVE-2026-105221
The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-04 发布INFO
CVE-2026-105222
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the
历史摘要 · 未重新核验 · NVD