Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: be...

CVE-2026-80443

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle

历史摘要 · 未重新核验 · NVD

Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7...

CVE-2026-63577

Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree)

历史摘要 · 未重新核验 · NVD

Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a name-constrained subordin...

CVE-2026-63576

Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc.

历史摘要 · 未重新核验 · NVD

Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who controls, or can obtain certific...

CVE-2026-103602

Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.

历史摘要 · 未重新核验 · NVD

Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts

CVE-2026-103602

Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.

历史摘要 · 未重新核验 · OSV.dev

Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix

CVE-2026-63577

Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree)

历史摘要 · 未重新核验 · OSV.dev

URI name constraints checked against a mis-parsed host

CVE-2026-63576

Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc.

历史摘要 · 未重新核验 · OSV.dev

The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by...

CVE-2026-102671

The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default.

历史摘要 · 未重新核验 · GitHub Advisory

The Joyland AI app accepts any TLS certificates from any server without validation.

CVE-2026-102668

The Joyland AI app accepts any TLS certificates from any server without validation.

历史摘要 · 未重新核验 · GitHub Advisory

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive inform

历史摘要 · 未重新核验 · GitHub Advisory

The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default.

CVE-2026-102671

The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default.

历史摘要 · 未重新核验 · NVD

The Joyland AI app accepts any TLS certificates from any server without validation.

CVE-2026-102668

The Joyland AI app accepts any TLS certificates from any server without validation.

历史摘要 · 未重新核验 · NVD

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation.

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive inform

历史摘要 · 未重新核验 · NVD

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor() function hardcodes TLS cer...

CVE-2026-103921

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-leg

历史摘要 · 未重新核验 · NVD

GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

CVE-2026-103921

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-leg

历史摘要 · 未重新核验 · OSV.dev

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrar...

CVE-2026-86131

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attack

历史摘要 · 未重新核验 · NVD

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_context, cert_reqs, verify_mod...

CVE-2026-97687

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, pro

历史摘要 · 未重新核验 · NVD

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

CVE-2026-97687

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, pro

历史摘要 · 未重新核验 · OSV.dev

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthentic...

CVE-2026-73594

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Impr

历史摘要 · 未重新核验 · NVD

Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure

### Summary Nodemailer's process-global DNS cache is keyed only by `host`, but each cache entry also stores the caller-

历史摘要 · 未重新核验 · GitHub Advisory