All CVEs — page 434 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows unauthenticated attackers to redirect password reset tokens to attacker-controlled domains by manipulating the Host header, potentially leading to unauthorized access to administrator accounts.
The flaw in wolfssl allows for forged CA certificates to pass verification, enabling a malicious server to bypass authentication. This is significant because it can be exploited by attackers who know the trusted CA certificates being used.
The flaw allows a certificate with no dNSName SAN but another SAN type to bypass the Subject CN dNSName name-constraint check, leading to potential unauthorized access.
The flaw allows attackers to bypass certificate signature verification by splitting the verification process into separate parse and signature checks, where parse errors mask signature failures. This enables forged certificates with valid names and dates to be accepted without proper cryptographic validation.
The flaw allows a remote, unauthenticated attacker to inject JScript code into hMailServer, potentially leading to command execution as the service account.