https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:20:43 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01328 bdu:2021-01328 https://cve.radiocsirt.org/vuln/bdu:2021-01328 https://cve.radiocsirt.org/vuln/cleanstart-2024-ch43456 <p><strong>Affected:</strong> CleanStart: glib-networking</p> <p>Security vulnerability affects the glib-networking package. In GNOME glib-networking through 2.</p> <p><strong>Affected:</strong> CleanStart: glib-networking</p> <p>Security vulnerability affects the glib-networking package. In GNOME glib-networking through 2.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-ch43456 https://cve.radiocsirt.org/vuln/cnvd-2020-31099 cnvd-2020-31099 https://cve.radiocsirt.org/vuln/cnvd-2020-31099 https://cve.radiocsirt.org/vuln/euvd-2026-41887 EUVD-2026-41887 https://cve.radiocsirt.org/vuln/euvd-2026-41887 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13645 <p>In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server&#39;s TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.</p> <p>In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server&#39;s TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-13645 https://cve.radiocsirt.org/vuln/ghsa-p43h-5x4h-9pp7 <p>In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server&#39;s TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.</p> <p>In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server&#39;s TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.</p> https://cve.radiocsirt.org/vuln/ghsa-p43h-5x4h-9pp7 https://cve.radiocsirt.org/vuln/gsd-2020-13645 gsd-2020-13645 https://cve.radiocsirt.org/vuln/gsd-2020-13645 https://cve.radiocsirt.org/vuln/msrc_cve-2020-13645 msrc_CVE-2020-13645 https://cve.radiocsirt.org/vuln/msrc_cve-2020-13645 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1094-1 <p>Security update for balsa</p> <p>Security update for balsa</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1094-1 https://cve.radiocsirt.org/vuln/suse-su-2021:3944-1 <p>Security update for glib-networking</p> <p>Security update for glib-networking</p> https://cve.radiocsirt.org/vuln/suse-su-2021:3944-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13645 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: glib-networking, Ubuntu:18.04:LTS: glib-networking, Ubuntu:20.04:LTS: balsa, Ubuntu:20.04:LTS: glib-networking</p> <p>In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server&#39;s TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: glib-networking, Ubuntu:18.04:LTS: glib-networking, Ubuntu:20.04:LTS: balsa, Ubuntu:20.04:LTS: glib-networking</p> <p>In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server&#39;s TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13645 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0778 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway Policy Manager ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway Policy Manager ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0778