Lucene search
+L

21 matches found

osv_bit
osv_bit
•added 2026/10/09 10:52 a.m.•18 views

BIT-PYTHON-MIN-2026-19553 SSLContext.wrap_bio() missing validation of server_hostname parameter

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References12
osv_bit
osv_bit
•added 2026/10/09 10:52 a.m.•16 views

BIT-PYTHON-2026-19553 SSLContext.wrap_bio() missing validation of server_hostname parameter

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•8 views

PT-2026-109165

ssl.SSLContext.wrap bio didn't require the server hostname argument to not be None if ssl.SSLContext.check hostname was set. Due to a missing parameter check in SSLObject, if the server hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead t...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•11 views

PT-2026-109167

ssl.SSLContext.wrap bio didn't require the server hostname argument to not be None if ssl.SSLContext.check hostname was set. Due to a missing parameter check in SSLObject, if the server hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead t...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•8 views

PT-2026-109169

ssl.SSLContext.wrap bio didn't require the server hostname argument to not be None if ssl.SSLContext.check hostname was set. Due to a missing parameter check in SSLObject, if the server hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead t...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References13
SUSE CVE
SUSE CVE
•added 2026/10/02 12:07 a.m.•6 views

SUSE CVE-2026-19553

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

6.8CVSS6AI score0.00401EPSS
SaveExploits1References10
osv_azl
osv_azl
•added 2026/09/30 5:16 p.m.•26 views

AZL-105687 CVE-2026-19553 affecting package python3 3.12.14-2

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2026/09/30 5:16 p.m.•15 views

AZL-105918 CVE-2026-19553 affecting package tensorflow 2.16.1-11

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/30 5:16 p.m.•20 views

CVE-2026-19553

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS0.00401EPSS
SaveExploits1References11
osv_ubuntu
osv_ubuntu
•added 2026/09/30 5:16 p.m.•12 views

UBUNTU-CVE-2026-19553

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References17
UbuntuCve
UbuntuCve
•added 2026/09/30 5:16 p.m.•16 views

CVE-2026-19553

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References16
osv_psf
osv_psf
•added 2026/09/30 4:17 p.m.•24 views

PSF-2026-44

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References10
Cvelist
Cvelist
•added 2026/09/30 4:17 p.m.•111 views

CVE-2026-19553 SSLContext.wrap_bio() missing validation of server_hostname parameter

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS0.00401EPSS
SaveExploits1References10
AlpineLinux
AlpineLinux
•added 2026/09/30 4:17 p.m.•16 views

CVE-2026-19553

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS6AI score0.00401EPSS
SaveExploits1
osv_cve
osv_cve
•added 2026/09/30 4:17 p.m.•11 views

CVE-2026-19553 SSLContext.wrap_bio() missing validation of server_hostname parameter

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS5.8AI score
SaveExploits0References14
Mend
Mend
•added 2026/09/30 4:17 p.m.•12 views

CVE-2026-19553

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

8.1CVSS6AI score0.00401EPSS
SaveExploits1References14
CVE
CVE
•added 2026/09/30 4:17 p.m.•89 views

CVE-2026-19553

The Python ssl.SSLContext.wrap_bio() method fails to require a non-None server_hostname argument even when ssl.SSLContext.check_hostname is enabled. Due to a missing parameter check in SSLObject , omitting the server_hostname argument causes certificate hostname verification to be silently skippe...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•8 views

PT-2026-103461

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description The ssl.SSLContext.wrap bio function fails to require the server hostname argument to be non-null when ssl.SSLContext.check hostname is enabled. Due to a missing parameter check in SSLObject, ...

7.6CVSS5.9AI score0.00401EPSS
SaveExploits1References100
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•11 views

PT-2026-105769

ssl.SSLContext.wrap bio didn't require the server hostname argument to not be None if ssl.SSLContext.check hostname was set. Due to a missing parameter check in SSLObject, if the server hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead t...

5.8AI score
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•11 views

CVE-2026-19553: Improper Validation of Certificate with Host Mismatch

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

7.6CVSS6AI score0.00401EPSS
SaveExploits1References2
Rows per page
Query Builder