CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- ibm mq operator, supplied mq advanced container images +1 moreIBM MQ Operator information disclosure5.9 Medium
- wolfsslDomain Name Validation Bypass with Apple Native Certificate Validation9.2 Critical
- axis device managerThe communication protocol used between client and server had a flaw that could be leveraged to...6.8 Medium
- zoom communications inc. workplace for linux, zoom workplace desktop +1 moreZoom Workplace for Linux - Improper Certificate Validation7.4 High
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls sct extension parsing5.3 Medium
- gallagher controller 7000Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could...6.5 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +5 more +7 moreWindows SMB Server Spoofing Vulnerability6.5 Medium
- siemens sicam toolbox iiA vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During...7.7 High
- siemens sicam toolbox iiA vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During...7.7 High
- comodo internet security premium, internet security +1 moreComodo Internet Security Premium Update certificate validation6.3 Medium
- avtech ip cameras, nvr devices, dvr devices +2 moreAVTECH IP camera, DVR, and NVR Devices Unauthenticated Information Disclosure8.3 High
- mhsanaei 3x-uiAn issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute...9.8 Critical
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: podman missing tls verification8.3 High
- mozilla firefox, thunderbird +1 moreWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 Critical
- hitachi energy microscada x sys600A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate...7.1 High
- yealink rps, ymcs +1 moreIn Yealink YMCS RPS before 2025-05-26, the certificate upload function does not properly validate...4.3 Medium
- yftech coros pace 3 firmwareAn issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to...9.8 Critical
- ibm mq operator, supplied mq advanced container images +1 moreIBM MQ improper certificate validation4.7 Medium
- fortinet fortios, fortisase, siemens ruggedcom ape1808 +2 moreAn Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below,...6.0 Medium
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 58.3 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 58.3 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 58.3 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 57.1 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 58.3 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 58.3 High
- curlNo QUIC certificate pinning with wolfSSL4.8 Medium
- curlQUIC certificate check skip with wolfSSL6.5 Medium
- amazon redshiftIssue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin7.0 High
- abb aspect-enterprise, matrix series, nexus series +2 moreSSL Verification Bypass8.8 High
- opensslThe x509 application adds trusted use instead of rejected use6.5 Medium
- ibm security reaqta edr, security qradar edr +1 moreIBM Security ReaQta improper certificate validation6.5 Medium
- ibm security reaqta edr, security qradar edr +1 moreIBM Security ReaQta improper certificate validation6.5 Medium
- samsung internetSamsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does...5.9 Medium
- asus driverhub"This issue is limited to motherboards and does not affect laptops, desktop computers, or other...9.4 Critical
- cisco catalyst sd-wan managerCisco Catalyst vManage Certificate Validation Vulnerability5.9 Medium
- jruby, jruby jruby-openssl +1 moreJRuby-OpenSSL has hostname verification disabled by default5.7 Medium
- oneidentity syslog-ng, debian linux +1 moretranport: TLS host name wildcard matching too lax7.5 High
- ibm iIBM i improper certificate validation5.4 Medium
- elastic logstashLogstash Improper Certificate Validation in TCP output6.5 Medium
- mediatek nr16, nr17, nr17r +1 more +3 moreIn Modem, there is a possible permission bypass due to improper certificate validation. This...5.7 Medium
- steve-community steveSteve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks8.0 High
- fleetdm fleetFleet doesn’t validate a server’s certificate when connecting through SSH6.3 Medium
- apache httpclient, apache software foundation httpcomponents, netapp ontap tools +2 moreApache HttpComponents: PSL (Public Suffix List) validation bypass7.5 High
- No product listedBYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was discovered to...8.1 High
- dell ecs, elastic cloud storage, objectscale +2 moreDell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An...3.1 Low
- hcl software bigfix platformHCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack2.1 Low
- ivanti endpoint managerImproper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before...4.8 Medium
- siemens license server (sls)A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The...5.4 Medium
- hcl software digital experienceHCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.5.9 Medium
- synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 moreImproper certificate validation vulnerability in the update functionality in Synology BeeStation...4.3 Medium
- Show moreLoading…