CVE-2026-24281

CVE-2026-24281 — Apache ZooKeeper ZKTrustManager reverse DNS fallback . The vulnerability arises when IP SAN validation fails and ZKTrustManager falls back to PTR-based name resolution, enabling attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with certificat...

Apache Zookeeper 安全漏洞

Apache Zookeeper is a software project of the Apache Foundation in the United States. It provides open-source distributed configuration services, synchronization services, and naming registration capabilities for large-scale distributed computing systems. There is a security vulnerability in Apac...

CLEANSTART-2025-JL63399 Security fixes for CVE-2025-61729 applied in versions: 0.20.2-r1

Security vulnerability affects the trust-manager package. This issue is resolved in later releases. See references for CVE details...

PT-2026-23852

Name of the Vulnerable Software and Affected Versions Apache ZooKeeper versions prior to 3.8.6 Apache ZooKeeper versions prior to 3.9.5 Description A flaw exists in the hostname verification process within Apache ZooKeeper’s ZKTrustManager. When IP Subject Alternative Name SAN validation fails, t...

EUVD-2004-1750

Malware in sbrugna...

EUVD-2017-17396

Malware in sbrugna...

EUVD-2009-2966

Malware in sbrugna...

EUVD-2025-29191

Malicious code in bioql PyPI...

CVE-2025-50944

An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation...

CVE-2025-50944

An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation...

AVTECH EagleEyes 安全漏洞

AVTECH EagleEyes is a remote instant monitoring mobile application from AVTECH, a Taiwan, China-based company. A security vulnerability exists in AVTECH EagleEyes version 2.0.0, which originates from a custom X509TrustManager that only checks the certificate expiration date and skips TLS chain...

CVE-2025-50944

An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation...

CVE-2025-50944

CVE-2025-50944 affects AVTECH EagleEyes 2.0.0. The vulnerability is in push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted where a custom X509TrustManager only checks certificate expiration date and does not perform proper TLS chain validation, enabling potential MITM or improper trust ...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: authservice, opentelemetry-collector, swagger, falco-exporter, sftpgo-plugin-kms, flyte, aws-node-termination-handler-fips, db-operator, spegel-fips, kbld-fips, openbao-fips, kube-logging-operator, kube-oidc-proxy, prometheus-postgres-exporter, go-md2man, gosu,...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: vault-k8s, swagger, falco-exporter, sftpgo-plugin-kms, aws-privateca-issuer, yunikorn-k8shim-fips, secrets-store-csi-driver-provider-aws, kbld-fips, opa-fips-envoy, openbao-fips, kube-logging-operator, kube-oidc-proxy, prometheus-postgres-exporter, atlantis-fips, nsc...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, govulncheck, vault-k8s, conftest, vault, cfssl, flyte, metacontroller, http-echo, rabbitmq-default-user-credential-updater, s5cmd, pombump, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver-provider-gcp,...

PT-2023-35692 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including fp cmp mag, crtmgr trust list lookup, an...

SUSE CVE-2009-2981

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors...

Spring Cloud Gateway HTTP2 Insecure TrustManager

Applications using Spring Cloud Gateway that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an insecure TrustManager. This makes the gateway able to connect to remote services with invalid or custom certificates...

PT-2022-2172 · Spring · Spring Cloud Gateway

Name of the Vulnerable Software and Affected Versions: Spring Cloud Gateway versions prior to 3.1.1+ Description: The issue is related to the implementation of the TrustManager technology for authentication in the Spring Cloud Gateway library, which is used for creating API gateways. It is...