A flaw was found in SSSD. When configured to evaluate password expiration warnings before...
CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LD
#cwe-393
共收录 9 条相关情报。
← 返回所有主题A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory Access Protocol) environments, ...
CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LD
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are ...
CVE-2026-92834
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This
Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are rec...
CVE-2026-85087
Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This iss
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recom...
CVE-2026-85483
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue
Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the...
CVE-2026-55958
Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding th
Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding the fixed message bag (MSGBAG_SIZE) sets an error code but ...
CVE-2026-55958
Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding th
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can ...
CVE-2026-42246
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4
net-imap vulnerable to STARTTLS stripping via invalid response timing
CVE-2026-42246
### Summary A man-in-the-middle attacker can cause `Net::IMAP#starttls` to return "successfully", without starting TLS.