5878 matches found
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component
Summary IBM Integrated Analytics System includes JWT service as an internal component responsible for JSON Web Token authentication. A security issue was detected in the apjwtservice.py module where SSL/TLS server certificate validation is not enabled on an SSL/TLS connection. The absence of...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a vulnerability due to Apache Commons HttpClient
Summary Apache Commons HttpClient is used by IBM Integrated Analytics System as an HTTP client library. CVE-2012-6153 affects Apache HttpComponents due to an incomplete fix related to SSL certificate hostname verification. The library fails to verify that the server hostname matches the domain na...
SUSE CVE-2026-62243
Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable Java 25...
nginx: NGINX: Heap buffer over-read allows memory modification or denial of service
A vulnerability in NGINX's ngxhttpssimodule allows an unauthenticated MITM attacker to trigger a heap buffer over-read by manipulating upstream server responses. This requires SSI, proxypass, and proxybuffering off to be configured, and can result in memory modification or a Denial of Service DoS...
EUVD-2026-65595
X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...
CVE-2026-79785
X-AnyLabeling's model downloader disabled TLS certificate verification by calling ssl._create_unverified_context() in download_with_retry (within anylabeling/services/auto_labeling/model.py), so neither the certificate chain nor hostname was validated when fetching models over HTTPS. An attacker ...
nginx: NGINX: Heap buffer over-read allows memory modification or denial of service
A vulnerability in NGINX's ngxhttpssimodule allows an unauthenticated MITM attacker to trigger a heap buffer over-read by manipulating upstream server responses. This requires SSI, proxypass, and proxybuffering off to be configured, and can result in memory modification or a Denial of Service DoS...
SUSE CVE-2026-63336
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...
PT-2026-81392
X-AnyLabeling's model downloader disabled TLS certificate verification. download with retry in anylabeling/services/auto labeling/model.py built a context with ssl. create unverified context and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on...
nginx: NGINX: Heap buffer over-read allows memory modification or denial of service
A vulnerability in NGINX's ngxhttpssimodule allows an unauthenticated MITM attacker to trigger a heap buffer over-read by manipulating upstream server responses. This requires SSI, proxypass, and proxybuffering off to be configured, and can result in memory modification or a Denial of Service DoS...
nginx: NGINX: Heap buffer over-read allows memory modification or denial of service
A vulnerability in NGINX's ngxhttpssimodule allows an unauthenticated MITM attacker to trigger a heap buffer over-read by manipulating upstream server responses. This requires SSI, proxypass, and proxybuffering off to be configured, and can result in memory modification or a Denial of Service DoS...
CVE-2026-78323
A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...
CVE-2026-78323 Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates
A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...
Improper Validation of Certificate with Host Mismatch
Overview io.netty:netty-handler is a library that provides an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which...
CVE-2026-63310
...
CVE-2026-63310
CVE-2026-63310 (now rejected by its CNA) tracks a vulnerability in NLTK before 3.9.3 where the package downloader in nltk/downloader.py performs no integrity verification between moving a downloaded file to its final location and extracting it. The SHA-256 checksum logic exists in _pkg_status() b...
CVE-2026-62243
Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable Java 25...
CVE-2026-62243 Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass
Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable Java 25...
CVE-2026-62243 Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass
Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable Java 25...