#cwe-295

共收录 447 条相关情报。

漏洞预警2026-09-26 发布INFO

Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QUIC certificate verification path when using a plain X509TrustManage...

CVE-2026-100665

Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QUIC certifi

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

安全公告2026-09-26 发布INFO

Nodemailer 5.0.0 through 10.0.1 TLS servername Cache Confusion

CVE-2026-100701

Nodemailer versions 5.0.0 through 10.0.1 use a process-global DNS cache that is keyed only by the DNS host, while each c

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-295

安全公告2026-09-26 发布INFO

Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass

CVE-2026-100665

Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QUIC certifi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-295

安全公告2026-09-24 发布INFO

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in...

CVE-2026-93291

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-295 #severity:critical

安全公告2026-09-24 发布INFO

Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper...

CVE-2026-82157

Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerabil

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-295 #severity:high

漏洞预警2026-09-24 发布CRITICAL

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.

CVE-2026-93291

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which c

来源摘录 · NVD

#cve #cwe-295

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssl_options/1 falls back to [{verify, ...

CVE-2026-67404

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bu

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verify_fun that overrides {bad_cert,...

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-sto

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-23 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjac...

CVE-2026-73587

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validat

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-23 发布INFO

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabl...

CVE-2026-91812

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate v

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...

CVE-2026-18173

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-295 #severity:low

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication.

CVE-2026-18173

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-22 发布INFO

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...

CVE-2026-83964

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-22 发布INFO

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connect_tcp() and TLSStream.wrap() can vali...

CVE-2026-63374

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Pri

历史摘要 · 未重新核验 · NVD

#cve #cwe-295 #cwe-297

安全公告2026-09-22 发布INFO

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

CVE-2026-63374

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Pri

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-295 #cwe-297

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability mig...

CVE-2026-65129

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate v

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability mig...

CVE-2026-65118

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate v

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions...

CVE-2026-84081

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certific

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-295 #severity:high

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation.

CVE-2026-84081

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certific

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-09-18 发布INFO

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/ssl_sock_ossl.c and pjlib/src...

CVE-2026-84975

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuT

历史摘要 · 未重新核验 · NVD

#cve #cwe-295 #cwe-297