Lucene search
+L

8 matches found

CVE
CVE
added 2026/08/03 9:21 p.m.150 views

CVE-2026-69248

Cryptography (Python) prior to 49.0.0 may accept a leaf certificate with a wildcard SAN (*.example.com) when a constrained sub-CA permits foo.example.com, due to DNSConstraint::matches treating a wildcard as matching the permitted constraint. This can allow escaping to sibling names (e.g., bar.ex...

8.3CVSS5.5AI score0.00185EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/08/03 9:21 p.m.16 views

CVE-2026-69248

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of .example.com,...

8.3CVSS5.5AI score0.00185EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.10 views

CVE-2020-10659

Entrust Entelligence Security Provider ESP before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where for example a user continues to interact with a web site that has an invalid certificate chain...

4.3CVSS6.8AI score0.00375EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-3106

Malware in sbrugna...

4.3CVSS4.9AI score0.00375EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.21 views

EUVD-2020-23389

Malware in sbrugna...

7.5CVSS7.4AI score0.01153EPSS
SaveExploits0References8
OSV
OSV
added 2021/01/15 2:15 p.m.4 views

DEBIAN-CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

7.5CVSS7.3AI score0.01153EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/15 12:00 a.m.17 views

Ericsson Erlang Trust Management Issue Vulnerability

Ericsson Erlang is a general-purpose concurrency-oriented programming language from Ericsson, Sweden. A trust management issue vulnerability exists in Ericsson Erlang/OTP before 23.2.2, which arises when an application accepts an invalid X.509 certificate chain and trusts it to a trusted root...

7.5CVSS7.1AI score0.01153EPSS
SaveExploits0References7
NVD
NVD
added 2020/03/18 2:15 a.m.21 views

CVE-2020-10659

Entrust Entelligence Security Provider ESP before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where for example a user continues to interact with a web site that has an invalid certificate chain...

4.3CVSS4.7AI score0.00375EPSS
SaveExploits0References2
Rows per page
Query Builder