Lucene search
+L

7970 matches found

Cvelist
Cvelist
added 2026/08/24 4:12 p.m.5 views

CVE-2026-19685 Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

SaveExploits0References5
EUVD
EUVD
added 2026/08/24 4:12 p.m.4 views

EUVD-2026-64957

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

9.8CVSS5.4AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/24 11:11 a.m.6 views

EUVD-2026-64826

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

6.5CVSS5.3AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 11:10 a.m.4 views

CVE-2026-78323

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

6.5CVSS5.4AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/24 5:34 a.m.5 views

CVE-2026-70454

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

8CVSS5.3AI score0.0019EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/21 9:16 a.m.7 views

CVE-2026-68745

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the...

8.1CVSS0.00075EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:21 a.m.10 views

EUVD-2026-63830

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the...

5.4AI score0.00075EPSS
SaveExploits0References1
Wolfi
Wolfi
added 2026/08/21 2:16 a.m.13 views

GHSA-9X89-V382-MJH7 vulnerabilities

Vulnerabilities for packages: openssl...

5.3AI score
SaveExploits0
EUVD
EUVD
added 2026/08/21 12:31 a.m.9 views

EUVD-2026-63640

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation...

7.7CVSS6AI score0.00316EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/20 10:17 p.m.13 views

CVE-2026-17024

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation...

7.7CVSS0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 9:50 p.m.29 views

CVE-2026-17024 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation...

7.7CVSS0.00316EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 9:50 p.m.13 views

CVE-2026-17024

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have an improper certificate validation flaw allowing remote arbitrary code execution (CVSS 7.7 HIGH). IBM's advisory at https://www.ibm.com/support/pages/node/7283858 provides details. No exploitation evidence or patch version is provided in the documents.

7.7CVSS6AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 6:39 p.m.29 views

CVE-2026-53583 libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

6.5CVSS0.00238EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
added 2026/08/20 6:39 p.m.30 views

CVE-2026-53583

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

6.5CVSS8.4AI score0.00238EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/20 6:39 p.m.11 views

EUVD-2026-63549

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

6.5CVSS5.3AI score0.00238EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/20 6:16 p.m.12 views

CVE-2026-73251

Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...

9.3CVSS0.00327EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/20 5:41 p.m.10 views

CVE-2026-73253 Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching

Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper subdomains to a client using the built-in TLS stack. The mgtlsverifycertsan and mgtlsverifycertcn functions in...

9.1CVSS5.2AI score
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/20 3:19 p.m.6 views

Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed in IBM Business Automation Manager Open Editions 9.5.2 Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn b...

8.7CVSS6.5AI score0.00691EPSS
SaveExploits2Affected Software1
EUVD
EUVD
added 2026/08/20 12:35 a.m.8 views

EUVD-2026-62968

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

7.4CVSS5.3AI score0.00193EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/20 12:35 a.m.7 views

EUVD-2026-62927

In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk Representational State Transfer REST server could access or modify all relevant data exchanged through that credential manager. The vulnerability is...

7.4CVSS5.4AI score0.00178EPSS
SaveExploits0References2
Rows per page
Query Builder