Advisories · Weakness
CWE-671.
Every Advisory and CVE whose sources give the weakness CWE-671, newest first.
- CVSS 5.3 Medium
Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0
- Nozomi Networks Guardian
- Nozomi Networks CMC
- CWE-671
- CVSS 8.3 High
Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0
- Nozomi Networks Remote Collector
- CWE-671
- CVSS 9.1 CriticalCritical · CVSS 9+
Mjolnir v1.9.0 accepts commands from any room
- matrix-org mjolnir
- CWE-671
- CVSS 5.4 Medium
A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or o…
- Cisco NX-OS Software
- CWE-671
- CVSS 3.5 Low
Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server
- nextcloud security-advisories
- CWE-671
- CVSS 8.8 High
Synology SSL VPN Client: Lack of administrator control over security vulnerability in client.cgi in Synology SSL…
- Synology SSL VPN Client
- CWE-671