Lucene search
+L

11212 matches found

Cvelist
Cvelist
•added 2026/09/24 6:39 p.m.•43 views

CVE-2026-82157

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access...

8.3CVSS0.00121EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 6:39 p.m.•14 views

EUVD-2026-86394

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access...

8.3CVSS5.8AI score0.00121EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/24 6:39 p.m.•18 views

CVE-2026-82157

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access...

8.3CVSS5.8AI score0.00121EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 3:17 p.m.•14 views

CVE-2026-77707

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...

5.9CVSS0.00132EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/24 2:41 p.m.•13 views

CVE-2026-77707 TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...

5.9CVSS5.8AI score0.00132EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 2:41 p.m.•21 views

CVE-2026-77707

The HAVELSAN Inc. Liman Render Engine (versions 1.0 before 1.2-75 ) is vulnerable to an improper certificate validation flaw. This security weakness allows an Adversary in the Middle (AiTM) to intercept or manipulate traffic due to TLS certificate validation being disabled specifically for Keyclo...

5.9CVSS5.8AI score0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 2:41 p.m.•41 views

CVE-2026-77707 TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...

5.9CVSS0.00132EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:41 p.m.•14 views

EUVD-2026-85918

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...

5.9CVSS5.8AI score0.00132EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/24 9:28 a.m.•5 views

Astra Linux – Vulnerability in Chromium

Improper certificate validation in FedCM using Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass web origin policies through crafted network traffic. Chromium security severity: Low...

7.5CVSS5.9AI score0.00259EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/24 9:28 a.m.•7 views

Astra Linux – Vulnerability in Chromium

Improper certificate validation in the Loader component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass web origin policies through crafted network traffic. Chromium security severity: Low...

5.4CVSS6AI score0.00162EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/24 9:28 a.m.•9 views

Astra Linux – Vulnerability in Chromium

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass web origin policies through crafted network traffic. Chromium security severity: Low...

4.3CVSS5.9AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•6 views

PT-2026-102299

An excluded subtrees iPAddress name constraint with an all-zero mask 0.0.0.0/0 or ::/0 does not restrict iPAddress SANs in certificates issued beneath it. The mask check treated an all-zero mask as matching nothing, when a /0 prefix matches every address of its family, so the exclusion was silent...

7.4CVSS6.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•5 views

PT-2026-98288

Name of the Vulnerable Software and Affected Versions PHP affected versions not specified Description OpenSSL stream peer verification incorrectly handles certificate validation by falling back to the Common Name CN when no entries in the subjectAltName SAN match. According to RFC 6125, the CN...

6.5CVSS5.8AI score0.00561EPSS
SaveExploits0References51
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•4 views

PT-2026-98246

Name of the Vulnerable Software and Affected Versions Dell ThinOS 10 versions prior to SecurityAddon 2605.10.2766 T10 Description An improper certificate validation issue exists where an unauthenticated attacker with adjacent network access could bypass protection mechanisms, potentially leading ...

8.3CVSS5.8AI score0.00121EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•7 views

CVE-2026-93291: Improper Certificate Validation

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code...

9.4CVSS6.7AI score0.00236EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•8 views

CVE-2026-82157: Improper Certificate Validation

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access...

8.3CVSS5.8AI score0.00121EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•11 views

CVE-2026-77707: Improper Certificate Validation

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...

5.9CVSS5.8AI score0.00132EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•5 views

PT-2026-98270

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code...

9.4CVSS6.7AI score0.00236EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•7 views

PT-2026-97836

Name of the Vulnerable Software and Affected Versions Liman Render Engine versions 1.0 through 1.2-74 Description Improper certificate validation in the Liman Render Engine allows an Adversary in the Middle AiTM attack. This occurs because TLS certificate validation is disabled for Keycloak...

5.9CVSS5.8AI score0.00132EPSS
SaveExploits0References3
Rockylinux
Rockylinux
•added 2026/09/23 6:07 p.m.•11 views

podman security update

An update is available for podman. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...

8.8CVSS6.3AI score0.00798EPSS
SaveExploits2
Rows per page
Query Builder