#cwe-295

共收录 447 条相关情报。

漏洞预警2026-10-04 发布INFO

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/g...

CVE-2026-105221

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

安全公告2026-10-04 发布INFO

alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer

CVE-2026-105222

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-295

安全公告2026-10-04 发布INFO

Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

CVE-2026-105221

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-295

安全公告2026-10-04 发布INFO

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows...

CVE-2026-105216

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to imperso

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-295 #severity:critical

安全公告2026-10-04 发布INFO

gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client...

CVE-2026-105218

gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-295 #severity:critical

安全公告2026-10-04 发布INFO

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker...

CVE-2026-105217

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allow

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-295 #severity:low

漏洞预警2026-10-04 发布INFO

gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider APIs. ...

CVE-2026-105218

gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-th

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-10-04 发布INFO

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to capture the worker token. Man-in...

CVE-2026-105217

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-10-04 发布INFO

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS helper sets Insecure...

CVE-2026-105216

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to imperso

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

安全公告2026-10-04 发布INFO

gopay before 1.5.119 Disabled TLS Certificate Verification in xhttp Client

CVE-2026-105218

gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-th

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-295

安全公告2026-10-04 发布INFO

Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verification via cron.php

CVE-2026-105217

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allow

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-295

安全公告2026-10-04 发布INFO

go-micro before 6.0.0 Disabled TLS Certificate Verification via tls.Config Helper

CVE-2026-105216

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to imperso

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-295

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle...

CVE-2026-71889

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathR

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-295 #severity:high

漏洞预警2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPath...

CVE-2026-71889

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathR

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509 credential to a LeafNode's signature_key. LeafNode.verif...

CVE-2026-71885

In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-295

安全公告2026-10-03 发布INFO

MLS X.509 credential not bound to the LeafNode signature key

CVE-2026-71885

In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-287 #cwe-295

安全公告2026-10-03 发布INFO

PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate

CVE-2026-71889

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathR

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-295

漏洞预警2026-10-02 发布INFO

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager for client sockets — TSSLSo...

CVE-2026-85088

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries ins

历史摘要 · 未重新核验 · NVD

#cve #cwe-295 #cwe-297

漏洞预警2026-10-02 发布INFO

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are rec...

CVE-2026-85087

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This iss

历史摘要 · 未重新核验 · NVD

#cve #cwe-295 #cwe-393

漏洞预警2026-10-02 发布INFO

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before ...

CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift pe

历史摘要 · 未重新核验 · NVD

#cve #cwe-295 #cwe-1188