38383 matches found
Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass
IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...
MINI-X5PP-C9RV-84GG
Bulletin has no description...
MINI-X579-QQHR-C235
Bulletin has no description...
Security Bulletin: This Power System update is being released to address CVE-2026-16835
Summary Power Systems Firmware is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state,...
CVE-2026-49457
erlangquic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname was not compared against the certificat...
EUVD-2026-58756
erlangquic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname was not compared against the certificat...
CVE-2026-49457 QUIC has Broken TLS verification
erlangquic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname was not compared against the certificat...
CVE-2026-49457
erlangquic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname was not compared against the certificat...
CVE-2026-49457
CVE-2026-49457 affects erlang_quic prior to 1.4.4, where the QUIC client did not authenticate the server during TLS 1.3 handshakes. Specifically, CertificateVerify signature checks were missing, the certificate chain was not validated, and hostname verification was skipped, effectively making ver...
Improper Certificate Validation
Spring Boot is vulnerable to Improper Certificate Validation. The vulnerability is due to hostname verification being disabled in Mail auto-configuration, which allows an attacker capable of intercepting the SMTP connection to impersonate the intended mail server and potentially access or...
GO-2026-5593 vulnerabilities
Vulnerabilities for packages: traefik-fips, sftpgo, traefik...
GO-2026-5575 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno-notation-aws-fips, kyverno...
GO-2020-0005 vulnerabilities
Vulnerabilities for packages: dgraph, etcd-fips, etcd...
GO-2026-5289 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, step-issuer, step, caddy-fips, caddy, step-fips, step-ca-fips, step-ca...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, step-issuer, step, caddy-fips, caddy, step-fips, step-ca-fips, step-ca...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: keda, opentelemetry-collector, fluent-bit-plugin-loki, prometheus-operator, aws-otel-collector-fips, beats, beats-fips, amazon-cloudwatch-agent-operator, datadog-agent-fips, elastic-agent, cloud-sql-proxy, istio-fips, jaeger-fips, ld-relay-fips, minio, agentbeat-fips...
GO-2025-4193 vulnerabilities
Vulnerabilities for packages: sigstore-scaffolding-fips, slsa-verifier, falcoctl-fips, kots, ratify, portieris, portieris-fips, skopeo, falcoctl, falco-no-driver, flux-source-controller, kyverno-policy-reporter-plugins-kyverno-fips, kyverno-policy-reporter-plugins-kyverno, cg, tekton-chains,...
