27 matches found
CVE-2026-87425
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...
CVE-2026-87425
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0 . By providing an unauthorized Certificate Authority (CA) certificate to an unauthenticated management interface, an attacker can force the system to trust illegitimate certificates. Thi...
EUVD-2026-94796
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...
CVE-2026-87425
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...
PT-2026-107861
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...
Unauthenticated Certificate Injection on Brocade ASCG before 3.5.0 (CVE-2026-87425)
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...
EUVD-2026-47621
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...
PT-2026-63332
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...
CVE-2026-54104
The CVE-2026-54104 entry covers a privilege escalation flaw in the U.S. GAO EPDS and CBCA EDS client authentication flow. The systems trust client-provided values for the epds_role_id parameter without verification, enabling a remote, authenticated attacker to raise their privileges. Affected com...
CVE-2026-50010
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SimpleTrustManagerFactory.engineGetTrustManagers and related paths wrap any user-supplied plain X509TrustManager in X509TrustManagerWrapper, which extends...
CVE-2025-8855
Authorization Bypass Through User-Controlled Key, Weak Password Recovery Mechanism for Forgotten Password, Authentication Bypass by Assumed-Immutable Data vulnerability in Optimus Software Brokerage Automation allows Exploiting Trust in Client, Authentication Bypass, Manipulate Registry...
CVE-2025-7702 Open Redirect in PUSULA's Manageable Email Sending System
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Pusula Communication Information Internet Industry and Trade Ltd. Co. Manageable Email Sending System allows Exploiting Trust in Client. This issue affects Manageable Email Sending System: from =2025.06 before 2025.08.06...
PT-2025-38516
Name of the Vulnerable Software and Affected Versions Pusula Communication Information Internet Industry and Trade Ltd. Co. Manageable Email Sending System versions prior to 2025.08.06 Description A URL Redirection to Untrusted Site 'Open Redirect' vulnerability exists in Pusula Communication...
CVE-2021-41794
ogsfqdnparse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow. The attacker can send a PFCP Session Establishment Request with "internet" as the PDI Network Instance. The first character is interpreted as a length value to be used ...
CVE-2024-23332 Client configured with permissive trust policies susceptible to rollback attack in Notary Project
The Notary Project is a set of specifications and tools intended to provide a cross-industry standard for securing software supply chains by using authentic container images and other OCI artifacts. An external actor with control of a compromised container registry can provide outdated versions o...
CVE-2022-38125
Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager FTP Agent modules allows Exploiting Trust in Client...
PT-2023-13594 · Secomea · Secomea Sitemanager
Name of the Vulnerable Software and Affected Versions: Secomea SiteManager affected versions not specified Description: The issue is related to an Improper Restriction of Communication Channel to Intended Endpoints, which allows exploiting trust in the client. This is specifically concerning the...
CVE-2021-41611
An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allows a remote server to obtain security trust well improperly. This indication of trust may be pass...
NEC ISM Client Trust Management Issue Vulnerability
NEC ISM Client is a client software from NEC Corporation that is used to manage NEC storage systems. NEC ISM Client has a trust management issue vulnerability that stems from the vulnerability of NEC ISM Client running on NEC Storage Manager or NEC Storage Manager Express to incorrect server...
