#cwe-297
共收录 45 条相关情报。
← 返回所有主题 漏洞预警2026-09-07 发布INFO
CVE-2026-79943
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
历史摘要 · 未重新核验 · NVD
安全公告2026-09-03 发布INFO
CVE-2026-9744
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validati
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-03 发布INFO
CVE-2026-9744
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validati
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-27 发布INFO
CVE-2026-59272
Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is expose
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-22 发布INFO
CVE-2026-62243
Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-20 发布INFO
CVE-2026-53583
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-14 发布INFO
CVE-2026-49457
erlang_quic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the serve
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-10 发布INFO
CVE-2026-65942
TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0.
Users are recommended to upgrade to v
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-05 发布INFO
CVE-2026-12730
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 throug
历史摘要 · 未重新核验 · NVD
安全公告2026-08-03 发布INFO
CVE-2026-59638
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in.
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-03 发布INFO
CVE-2026-59638
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in.
历史摘要 · 未重新核验 · NVD
安全公告2026-08-03 发布INFO
CVE-2026-59638
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in.
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-07-27 发布INFO
CVE-2026-66053
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings.
This issue affect
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-27 发布INFO
CVE-2026-48145
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings.
This issue affects A
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-27 发布INFO
CVE-2026-48144
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings.
This issue affect
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-16 发布INFO
CVE-2026-15925
Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed
历史摘要 · 未重新核验 · NVD
安全公告2026-07-01 发布INFO
CVE-2026-49457
### Impact
The QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signatur
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-22 发布INFO
CVE-2026-54275
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the server_hostname TLS
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-16 发布INFO
CVE-2026-12162
Improper host validation in the social login autofill feature in
Devolutions Remote Desktop Manager 2026.2.8 allows an
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-35563
It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches
历史摘要 · 未重新核验 · NVD