47245 matches found
MAL-2026-17663 Malicious code in mfasolver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f583d18816b977d3e721da8423405533e9915ad13631d8114e40e54aefd9152 package.json at line 41 declares the only runtime dependency node-net-pool as...
cve-2013-3900-winverifytrust-mitigation
Mitigación de CVE-2013-3900 WinVerifyTrust / EnableCertPaddingCheck Este repositorio contiene un script de PowerShell de remediación y verificación que aborda el hallazgo de Tenable/Nessus: ID de Plugin: 166555 Nombre: Mitigación de Validación de Firma WinVerifyTrust CVE-2013-3900...
EUVD-2026-94685
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution i...
CVE-2026-87688
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. The flaw occurs because user-supplied certificate identifiers are processed without adequate sanitization before being executed in external system rout...
CVE-2026-87688
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution i...
CLEANSTART-2026-HH95708 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
Security vulnerability affects the apache-hive package. Improper validation of certificate with host mismatch in Apache Log4j SMTP appender...
CLEANSTART-2026-GR33077 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
CVE-2026-32281 affects multiple packages. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual vulnerability details...
CLEANSTART-2026-JP32193 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...
CVE-2026-27137 affects multiple packages. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint wil...
CLEANSTART-2026-SJ77898 Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints
CVE-2026-27138 affects multiple packages. Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. See references for individual vulnerability details...
CLEANSTART-2026-NF19276 Improper certificate validation in Apache MINA SSHD (server-side)
Security vulnerability affects the wildfly package. Improper certificate validation in Apache MINA SSHD server-side...
CLEANSTART-2026-JP32087 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...
CVE-2026-39828 affects multiple packages. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. See reference...
EUVD-2026-94641
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabling...
CVE-2026-88647
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...
PT-2026-107798
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution i...
EUVD-2026-95139
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
CVE-2026-95184
The software gnutls version v3.8.13 is affected by an improper certificate validation vulnerability. This flaw causes the application to incorrectly reject legitimate certificates from valid users, resulting in a Denial of Service (DoS) . No specific remediation, exploit information, or exploit l...
RHEL 9 : python3.14 (RHSA-2026:77021)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77021 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
CVE-2026-95184
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
