Design/Logic Flaw

Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations...

Huawei EulerOS: Security Advisory for elinks (EulerOS-SA-2019-2376)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for elinks (EulerOS-SA-2019-2574)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : elinks (EulerOS-SA-2019-2574)

According to the version of the elinks package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.CVE-2012-6709 Note that Tenable Network Security has extracted the...

EulerOS 2.0 SP2 : elinks (EulerOS-SA-2019-2376)

According to the version of the elinks package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.CVE-2012-6709 Note that Tenable Network Security has extracted the...

Denial of service

The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service...

CVE-2019-11554

Affected: Audible Android app up to version 2.34.0. Issue: Missing SSL certificate validation in Adobe SDKs used by the app, allowing MITM attackers to cause a denial of service. Impact: Availability degradation. Root cause: SSL validation bypass in Adobe SDK integration. Remediation: Not specifi...

CVE-2010-4532

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks...

EulerOS 2.0 SP5 : elinks (EulerOS-SA-2019-2142)

According to the version of the elinks package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.CVE-2012-6709 Note that Tenable Network Security has extracted the...

Machine-In-The-Middle

Overview Affected versions of airtable are vulnerable to Machine-In-The-Middle. The package has SSL certificate validation disabled by default unintentionally. This may allow attackers in a privileged network position to decrypt intercepted traffic. Recommendation Upgrade to version 0.7.2 or late...

CVE-2013-2255

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...

Null pointer dereference

IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate...

CVE-2019-15525

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

Design/Logic Flaw

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

CVE-2019-15525

There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...

CVE-2019-1948 Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability

A vulnerability in Cisco Webex Meetings Mobile iOS could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer SSL certificate. The vulnerability is due to insufficient SSL certificate validation by the affected...

Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability

A vulnerability in Cisco Webex Meetings Mobile iOS could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer SSL certificate. The vulnerability is due to insufficient SSL certificate validation by the affected...

CVE-2019-14516

The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks against requests for FAQs or Help...

CVE-2019-1010206

OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...

CVE-2019-1010206

OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...