Lucene search
+L

3759 matches found

RedHat Linux
RedHat Linux
added 7 hours ago3 views

gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...

8.2CVSS7.6AI score0.00423EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 7 hours ago4 views

gnutls: gnutls: Security bypass due to incorrect name constraint handling

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities CAs only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate...

7.4CVSS7.3AI score0.00475EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 10 hours ago3 views

CVE-2026-16317

A flaw was found in s2n-tls, a Transport Layer Security TLS implementation. This vulnerability allows an active man-in-the-middle MITM attacker to silently discard individual application data records in TLS 1.3 connections. The issue stems from missing validation of the outer content type byte in...

8.3CVSS5.3AI score
Exploits0References2
EUVD
EUVD
added yesterday12 views

EUVD-2026-41903

PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms...

8.2CVSS5.2AI score0.00236EPSS
Exploits0References4
NVD
NVD
added yesterday5 views

CVE-2026-56586

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

3.1CVSS
Exploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-56587

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications...

3.7CVSS
Exploits0References1
CVE
CVE
added yesterday6 views

CVE-2026-56586

Technical details about CVE-2026-56586 are not publicly available in the provided documents. Monitor for updates from the vendor; no affected products, versions, or remediation details are specified here.

3.1CVSS5.3AI score
Exploits0References1
Cvelist
Cvelist
added yesterday23 views

CVE-2026-56586 HCL IEM was affected with X-Content-Type-Options Header Missing

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

3.1CVSS
Exploits0References1
CVE
CVE
added yesterday8 views

CVE-2026-56587

CVE-2026-56587 (HCL IEM) : The issue arises from HTTPS Strict-Transport-Security not being enforced, potentially enabling SSL stripping or man-in-the-middle attacks and compromising secure communications. Documented impact: confidentiality at LOW, with no integrity/availability impact. CVSSv3.1 m...

3.7CVSS5.3AI score
Exploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-46274

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications...

3.7CVSS5.2AI score
Exploits0References1
Cvelist
Cvelist
added yesterday24 views

CVE-2026-56587 HCL IEM was affected with Strict transport security not enforced

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications...

3.7CVSS
Exploits0References1
CVE
CVE
added 5 days ago31 views

CVE-2026-53712

The CVE describes a vulnerability in the OnGres SCRAM library (com.ongres.scram:scram-client and scram-common) where, prior to version 3.3, a TLS MITM can silently downgrade SCRAM-SHA-256-PLUS with channel binding to SCRAM-SHA-256 without channel binding when an X.509 certificate uses modern sign...

8.2CVSS5.4AI score0.0026EPSS
Exploits0References2
OSV
OSV
added 5 days ago4 views

CVE-2026-53712 SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms

SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to 3.3, a flaw in com.ongres.scram:scram-client and com.ongres.scram:scram-common allows an attacker capable of a TLS...

8.2CVSS5.5AI score0.0026EPSS
Exploits0References4
Cvelist
Cvelist
added 5 days ago36 views

CVE-2026-53712 SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms

SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to 3.3, a flaw in com.ongres.scram:scram-client and com.ongres.scram:scram-common allows an attacker capable of a TLS...

8.2CVSS0.0026EPSS
Exploits0References2
NVD
NVD
added 5 days ago10 views

CVE-2024-23573

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of...

3.7CVSS0.00155EPSS
Exploits0References1
CVE
CVE
added 5 days ago10 views

CVE-2024-23573

CVE-2024-23573 affects HCL Aftermarket EPC. The vulnerability is described as the application being vulnerable to Lucky 13, making the TLS1.1/1.2 and DTLS1.0/1.2 implementations (and older SSL3.0/TLS1.0) susceptible, with potential for a man-in-the-middle. The Connected documents provide the tech...

3.7CVSS5.3AI score0.00155EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 5 days ago11 views

CVE-2024-23573

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of...

3.7CVSS5.3AI score0.00155EPSS
Exploits0References2Affected Software1
NVD
NVD
added 5 days ago9 views

CVE-2026-13410

Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled. The default user agent is initialised with SSLverifymode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept the...

8.2CVSS0.00242EPSS
Exploits0References4
Cvelist
Cvelist
added 5 days ago36 views

CVE-2026-13410 Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled

Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled. The default user agent is initialised with SSLverifymode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept the...

0.00242EPSS
Exploits0References3
OSV
OSV
added 5 days ago4 views

CVE-2026-13410 Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled

Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled. The default user agent is initialised with SSLverifymode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept the...

8.2CVSS5.4AI score0.00242EPSS
Exploits0References8
Rows per page
Query Builder