#cwe-295

共收录 447 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's...

CVE-2026-103503

Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections to impersonate hex.pm, repo.hex.pm or any other repository...

CVE-2026-103502

Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remot...

CVE-2026-78020

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validat

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to...

CVE-2026-96207

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle...

CVE-2026-84032

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-08 发布INFO

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-96207

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.

CVE-2026-84032

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override th...

CVE-2026-107318

@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布LOW

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized...

CVE-2026-88648

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to by

来源摘录 · NVD

漏洞预警2026-10-06 发布INFO

Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit...

CVE-2026-63697

Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privile

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjace...

CVE-2026-67270

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

CVE-2026-105794

# Summary Improper TLS hostname verification allows a man-in-the-middle (MITM) attack on MsQuic. # Details Only MsQu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or Qu...

CVE-2026-105794

MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20,

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

CVE-2026-103921

## Impact `buildWSLegacyExecutor()` in `@graphql-tools/executor-legacy-ws` previously hardcoded `rejectUnauthorized: fa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-05 发布INFO

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in...

CVE-2026-105223

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-...

CVE-2026-105223

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verification

CVE-2026-105223

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-05 发布INFO

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification...

CVE-2026-105222

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-05 发布INFO

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that...

CVE-2026-105221

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-04 发布INFO

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is p...

CVE-2026-105222

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the

历史摘要 · 未重新核验 · NVD