24523 matches found
CVE-2026-13070 Improper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination
A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling validation is enabled by default for outgoing TLS connections. Affected scenarios require the remote peer to hold a...
Improper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination
A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling validation is enabled by default for outgoing TLS connections. Affected scenarios require the remote peer to hold a...
SUSE CVE-2026-56820
Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...
Improper Certificate Validation
Overview io.netty:netty-handler-ssl-ocsp is a Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. Affected versions of this package are vulnerable to Improper Certificate Validation in the...
GHSA-C35G-MGC3-95RX
creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...
GHSA-M5FR-RV3H-XG2R
creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...
GHSA-537C-GMF6-5CCF
creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...
CVE-2026-63133
creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...
MINI-38Q6-263W-QGPJ
Bulletin has no description...
CVE-2026-46582
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolvin...
MINI-J29R-957C-HV2W
Bulletin has no description...
MINI-PCQ3-H432-F2RF
Bulletin has no description...
MINI-52FM-WF62-QMC9
Bulletin has no description...
CVE-2026-50243
In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a 'response-ip' redirect rule or an RPZ file with an RPZ-IP trigger, the rewriting handler does not check the security status of the upstream answer...
GHSA-MMX7-HFXF-JPPX
creationtimestamp| type| source ---|---|--- 2026-07-22 12:01:01+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmdckvy24...
CVE-2026-60799
creationtimestamp| type| source ---|---|--- 2026-07-22 11:14:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mra6z3whu22o 2026-07-22 11:14:30+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116963335733043048 2026-07-23 17:47:18+00:00| seen|...
GHSA-R7WM-3CXJ-WFF9
creationtimestamp| type| source ---|---|--- 2026-07-22 09:31:57+00:00| seen| https://gist.github.com/alon710/a699a0ff594951c1548ee266a0f2d1af...
GHSA-2RP8-MM9Q-FP49
creationtimestamp| type| source ---|---|--- 2026-07-22 08:31:19+00:00| seen| https://gist.github.com/alon710/200e1b4ca9b1b66d608a6e02108ba259...
CVE-2026-14322
The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a payment method other than its recognised gateways, allowing unauthenticated users to create fully-approved bookings for priced appointments without making any payment...