206881 matches found
CVE-2026-92868
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
DEBIAN-CVE-2026-92868
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
CVE-2026-102508
Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...
EUVD-2026-89674
Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...
CVE-2026-102508
The Apache PLC4X (PLC4J) OPC UA driver is vulnerable to integrity bypass , unverifiable server certificates , and silent downgrades in versions 0.9.0 through 0.13.1 . The root cause involves improper cryptographic signature verification and lack of trust anchors: versions 0.9.0–0.11.0 fail to enf...
CVE-2026-102508 Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade
Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...
EUVD-2026-89661
Cross-Site Scripting via Script Validation Bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused...
CVE-2026-93463
A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...
CVE-2026-93463
A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...
CVE-2026-93463
The baserCMS content management system is vulnerable to Cross-Site Scripting (XSS) (CWE-79) due to a script validation bypass . If successfully exploited, an attacker may cause an arbitrary script to be executed within a user's web browser. Remediation involves updating the software to the latest...
CVE-2026-92868
An improper certificate validation vulnerability exists in Pgpool-II . This flaw may allow an unauthenticated attacker to bypass client certificate authentication . While the vulnerability is documented, specific details regarding the affected versions, root cause, or available remediation are no...
CVE-2026-92868
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
EUVD-2026-89658
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
CVE-2026-92868
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
CVE-2026-92868
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
CVE-2026-97196
Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: from n/a through 4.16.9...
EUVD-2026-89655
Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: from n/a through 4.16.9...
Improper Validation Of Nested Digest Algorithm Sequence Elements
node-forge is vulnerable to improper validation of nested DigestAlgorithm sequence elements. The vulnerability is due to insufficient validation of element counts in the DigestAlgorithm sequence, which allows an attacker to insert garbage bytes and forge valid signatures for arbitrary messages wh...
CVE-2026-103110
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a Pexip Infinity Conferencing Node...