Search Vulnerabilities

Improper TLS Hostname Verification in Snowflake Connector for Python

AIOHTTP: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostname

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions

Apache Thrift: TSSLTransportFactory.java hostname verification

Apache Thrift: Java TSSLTransportFactory hostname verification

Apache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypass

Apache Ranger: Hostname verification bypass in NiFiRegistryClient and NifiClient

Xiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITM

Apache Uniffle: Insecure SSL Configuration in Uniffle HTTP Client

Apache Log4j Core: Missing TLS hostname verification in Socket appender

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7

Host Header Injection in Akinsoft's QR Menu

Host Header Injection in HotelRunner's B2B

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7

Org.keycloak.protocol.services: keycloak hostname verification

In JetBrains Toolbox App before 2

The mobile application (com

IBM OpenPages improper certificate validation