PT-2018-17967

Name of the Vulnerable Software and Affected Versions Pelco Sarix Professional versions prior to 3.29.67 Description A vulnerability exists due to the lack of validation of the SSL certificate, which could allow arbitrary system file download. Recommendations For versions prior to 3.29.67, update...

CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

CVE-2012-6709: Improper Certificate Validation

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

Code injection

The GUI component aka PulseUI in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set...

CVE-2018-6374

The GUI component aka PulseUI in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set...

CVE-2018-6374

The GUI component aka PulseUI in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set...

PT-2018-17514

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Linux clients versions prior to PULSE5.2R9.2 Pulse Secure Desktop Linux clients versions 5.3.x prior to PULSE5.3R4.2 Description The issue concerns the GUI component, also known as PulseUI, which does not perform strict SS...

CVE-2017-17718

The Net::LDAP aka net-ldap gem before 0.16.0 for Ruby has Missing SSL Certificate Validation...

DEBIAN-CVE-2017-17718

The Net::LDAP aka net-ldap gem before 0.16.0 for Ruby has Missing SSL Certificate Validation...

CVE-2017-17718

CVE-2017-17718 concerns the Net::LDAP (net-ldap) Ruby gem, where versions before 0.16.0 lack proper SSL certificate validation. The connected IBM bulletin reiterates the same CVE description (Missing SSL Certificate Validation) and lists the vulnerability alongside CWE-295 and a IBM X-Force CVSS ...

CVE-2017-17718

The Net::LDAP aka net-ldap gem before 0.16.0 for Ruby has Missing SSL Certificate Validation...

CVE-2017-17718: Improper Certificate Validation

The Net::LDAP aka net-ldap gem before 0.16.0 for Ruby has Missing SSL Certificate Validation...

PT-2017-14968

Name of the Vulnerable Software and Affected Versions Net::LDAP gem versions prior to 0.16.0 Description The issue is related to missing SSL certificate validation in the Net::LDAP gem for Ruby. Recommendations For versions prior to 0.16.0, update to version 0.16.0 or later to resolve the issue...

CVE-2017-3194

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks...

PT-2017-15700

Name of the Vulnerable Software and Affected Versions Flash Seats Mobile App for Android versions 1.7.9 and earlier Flash Seats Mobile App for iOS versions 1.9.51 and earlier Description The issue is related to the failure of the Flash Seats Mobile App to properly validate SSL certificates provid...

PT-2017-15704

Name of the Vulnerable Software and Affected Versions Pandora iOS app versions prior to 8.3.2 Description The issue is related to the failure of the Pandora iOS app to properly validate SSL certificates provided by HTTPS connections. This failure may enable an attacker to conduct man-in-the-middl...

Mobile Stock Trading App Providers Unresponsive to Glaring Vulnerabilities

More than 20 of the most popular mobile trading applications used by consumers and day-traders for securities transactions contain glaring vulnerabilities that could allow attackers to sniff personal data or steal money from accounts. Researchers from IOActive today published a report describing...

CVE-2015-0904: Improper Certificate Validation

The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates, which allows remote attackers to obtain sensitive information via a man-in-the-middle attack...