47254 matches found
CVE-2026-95208
An issue in the ConfirmNameConstraints function wolfcrypt/src/asn.c of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service DoS via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS...
CVE-2026-88647
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...
CVE-2026-95184
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
RHEL 10 : python3.14 (RHSA-2026:77018)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77018 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
RockyLinux 8 : python3.12 (RLSA-2026:77028)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:77028 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of a...
CVE-2026-95184
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
CVE-2026-95208
An issue in the ConfirmNameConstraints function wolfcrypt/src/asn.c of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service DoS via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS...
CVE-2026-95208
The wolfSSL library versions v5.9.1 and v5.9.2 are vulnerable to a Denial of Service (DoS) condition due to an issue in the ConfirmNameConstraints() function located in wolfcrypt/src/asn.c. An attacker can provide crafted Certificate Authority certificates which cause wolfSSL-based TLS clients to...
EUVD-2026-95092
An issue in the ConfirmNameConstraints function wolfcrypt/src/asn.c of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service DoS via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS...
PT-2026-108302
Name of the Vulnerable Software and Affected Versions Microsoft Partner Center affected versions not specified Description Improper certificate validation allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer...
PT-2026-108208
Name of the Vulnerable Software and Affected Versions @fastify/reply-from versions prior to 12.7.0 Description Built-in HTTPS transports in this Fastify plugin override the secure default by setting rejectUnauthorized to false. This prevents the proxy from verifying the TLS certificate of the...
CVE-2026-95210
The gnutls library in version v3.8.13 is vulnerable to improper certificate validation . This flaw allows the application to accept certificates that contain invalid extensions , potentially compromising the integrity of the TLS connection. While the provided documents do not specify a direct rem...
MiracleLinux 8 : python3.12-3.12.15-2.el8_10 (AXSA:2026-1997:24)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1997:24 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of...
PT-2026-108118
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
CVE-2026-88648
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
EUVD-2026-95205
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
CVE-2026-92543
Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...
CVE-2026-95184
The software gnutls version v3.8.13 is affected by an improper certificate validation vulnerability. This flaw causes the application to incorrectly reject legitimate certificates from valid users, resulting in a Denial of Service (DoS) . No specific remediation, exploit information, or exploit l...
PT-2026-108035
FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls open of libavformat/tls mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted...