CVE-2024-31853

A vulnerability has been identified in SICAM TOOLBOX II All versions V07.11. During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to...

PT-2025-28535 · Microsoft · Windows Smb +1

Name of the Vulnerable Software and Affected Versions: Windows SMB affected versions not specified Description: The issue concerns improper certificate validation, allowing an authorized attacker to perform spoofing over a network. This can be exploited by an attacker to impersonate a legitimate...

PT-2025-29107 · Zoom · Zoom Workplace App For Linux

Name of the Vulnerable Software and Affected Versions: Zoom Workplace for Linux versions prior to 6.4.13 Description: Improper certificate validation may allow an unauthorized user to conduct an information disclosure via network access. Recommendations: Update Zoom Workplace for Linux to version...

CVE-2025-7095

A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Handler. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an atta...

CVE-2025-7095

A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Handler. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an atta...

CVE-2025-7095 Comodo Internet Security Premium Update certificate validation

A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Handler. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an atta...

CVE-2025-7095 Comodo Internet Security Premium Update certificate validation

A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Handler. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an atta...

CVE-2025-7095

CVE-2025-7095 affects Comodo Internet Security Premium 12.3.4.8162, specifically the Update Handler component. The issue is an improper certificate validation vulnerability that enables remote initiation of an attack. Documents describe a high attack complexity and difficult exploitability, with ...

PT-2025-28089 · Comodo · Comodo Internet Security Premium

Name of the Vulnerable Software and Affected Versions: Comodo Internet Security Premium version 12.3.4.8162 Description: A critical vulnerability has been found in the Update Handler component of Comodo Internet Security Premium, leading to improper certificate validation. The attack can be...

Comodo Internet Security Premium 信任管理问题漏洞

Comodo Internet Security Premium is a suite of computer security software from Comodo, Inc. that focuses on Internet security. A trust management issue vulnerability exists in Comodo Internet Security Premium version 12.3.4.8162, which stems from an improper certificate validation in the update...

Security update for gpg2

This update for gpg2 fixes the following issues: gpg: Allow the use of an ADSK subkey as ADSK subkey. bsc1239119 CVE-2025-30258 Don't install expired sks certificate bsc1243069 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

CVE-2025-34066

An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle MITM attacks...

CVE-2025-34066

An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle MITM attacks...

CVE-2025-34066 AVTECH IP camera, DVR, and NVR Devices Unauthenticated Information Disclosure

An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle MITM attacks...

CVE-2025-34066 AVTECH IP camera, DVR, and NVR Devices Unauthenticated Information Disclosure

An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle MITM attacks...

CVE-2025-34066

CVE-2025-34066 affects AVTECH IP cameras, DVRs, and NVRs. The root cause is improper certificate validation caused by using wget with --no-check-certificate in scripts such as SyncCloudAccount.sh and SyncPermit.sh, exposing HTTPS communications to MITM attacks. Affected products are AVTECH device...

AVTECH IP camera、AVTECH DVR和AVTECH NVR 安全漏洞

AVTECH IP camera and others are products of AVTECH Corporation, U.S.A. AVTECH IP camera is a series of network security cameras.AVTECH DVR is a digital video recording host.AVTECH NVR is a network video recorder. A security vulnerability exists in AVTECH IP camera, AVTECH DVR, and AVTECH NVR that...

PT-2025-27545 · Avtech +1 · Avtech Ip Cameras +3

Name of the Vulnerable Software and Affected Versions: AVTECH IP cameras, DVRs, and NVRs affected versions not specified Description: An improper certificate validation issue exists due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This...

IBM MQ 9.3 < 9.3.0.30 LTS / 9.3 < 9.4.3 CD / 9.4 < 9.4.0.12 LTS / 9.4.3 (7238313)

The version of IBM MQ Server running on the remote host is affected by a vulnerability as referenced in the 7238313 advisory. - CWE: CWE-295: Improper Certificate Validation CVE-2025-33181 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

The vulnerability in the implementation of the TLS protocol by Mozilla Firefox allows a perpetrator to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability in the TLS protocol implementation of Mozilla Firefox is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to protected information...