CVE-2026-27133 Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 to before 0.50.1, when a chain consisting of multiple CA Certificate Authority certificates is used in the trusted certificates configuration of a Kafka Connect opera...

CVE-2025-53869

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates...

CVE-2025-53869

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates...

CVE-2025-53869

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates...

PT-2026-5245

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates...

Errands 信任管理问题漏洞

Errands is a to-do task management tool for mrvladus individual developers. A trust management issue vulnerability exists in Errands versions prior to 46.2.10 that stems from not validating the TLS certificate of the CalDAV server...

CVE-2025-65290

Aqara Hub devices including Camera Hub G3 4.1.90027, Hub M2 4.3.60027, and Hub M3 4.3.60025 fail to validate server certificates during HTTPS firmware downloads, allowing man-in-the-middle attackers to intercept firmware update traffic and potentially serve modified firmware files...

EUVD-2014-5890

Malware in sbrugna...

EUVD-2014-7209

Malware in sbrugna...

EUVD-2014-6807

Malware in sbrugna...

EUVD-2020-29147

Malware in sbrugna...

EUVD-2008-3268

Malware in sbrugna...

EUVD-2020-4148

Malware in sbrugna...

EUVD-2014-6608

Malware in sbrugna...

EUVD-2014-3264

Malware in sbrugna...

EUVD-2025-29025

Malicious code in bioql PyPI...

EUVD-2023-49905

Malicious code in bioql PyPI...

EUVD-2022-33820

Malicious code in bioql PyPI...

CVE-2025-58781

WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor encrypted traffic...

CVE-2025-58781

WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor encrypted traffic...