CVE-2024-50691

SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app...

CVE-2024-50691

SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app...

CVE-2024-50691

SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app...

SunGrow iSolarCloud 安全漏洞

SunGrow iSolarCloud is an Android app for new energy power plant management from China SunGrow SunGrow. It is used for power plant data collection, monitoring, operation and maintenance and operation management. A security vulnerability exists in SunGrow iSolarCloud Android app version...

CVE-2024-50691

SunGrow iSolarCloud Android app (V2.1.6.20241104 and earlier) is affected by missing SSL certificate validation, allowing MITM impersonation of the iSolarCloud server. The vulnerability enables an attacker to intercept or modify communications between the Android app and the server. CVSSv3.1 base...

AdaCore Ada Web Server 安全漏洞

AdaCore Ada Web Server AdaCore AWS is an Ada library from AdaCore that facilitates the handling of HTTP requests and JSON. It is used to simplify the process of interacting with APIs. A security vulnerability exists in the AdaCore Ada Web Server version 25.0.0 release, which stems from a lack of...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Linux Kernel Improper Certificate Validation (CVE-2022-1343)

Under certain circumstances, the command line OCSP verify function reports successful verification when the varification in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result...

CVE-2025-1001 Medixant RadiAnt DICOM Viewer Improper Certificate Validation

Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack MITM. An attacker could modify the server's response and deliver a...

CVE-2025-1001 Medixant RadiAnt DICOM Viewer Improper Certificate Validation

Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack MITM. An attacker could modify the server's response and deliver a...

Devolutions Remote Desktop < 2024.3.20.0 Improper Certificate Validation (DEVO-2025-0001)

The version of Devolutions Remote Desktop Manager installed on the remote host is prior to 2024.3.20.0 and is, therefore, affected by an improper certificate validation vulnerability: - Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on...

CVE-2024-49782 IBM OpenPages improper certificate validation

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification...

CVE-2024-49782 IBM OpenPages improper certificate validation

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification...

The vulnerability of Dell BSAFE SSL-J cryptographic library, related to errors in the certificate validation process, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Dell BSAFE SSL-J cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Home Assistant 安全漏洞

Home Assistant is an open source home automation management system from Home Assistant Open Source. The system is primarily used to control home automation devices. A security vulnerability exists in Home Assistant versions prior to 2024.1.6 that stems from not properly validating SSL certificate...

PT-2025-6975 · Ubiquiti · Unifi Protect Cameras

Name of the Vulnerable Software and Affected Versions: UniFi Protect Cameras affected versions not specified Description: The issue is related to a lack of firmware update capability due to incorrect certificate validation in UniFi Protect Cameras. This could allow a remote attacker to gain full...

Dell BSAFE Trust Management Issue Vulnerability

Dell BSAFE is a security software product from Dell, Inc. that supports cryptographic algorithms, certificate chain validation, and Transport Layer Security TLS encryption suites, among other things, to help users achieve a variety of security goals for their applications. A trust management issu...

CVE-2024-29733

Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTPTLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.createdefaultcontext during FTPTLS...

CVE-2022-32509

An issue was discovered on certain Nuki Home Solutions devices. Lack of certificate validation on HTTP communications allows attackers to intercept and tamper data. This affects Nuki Smart Lock 3.0 before 3.3.5, Nuki Bridge v1 before 1.22.0 and Nuki Bridge v2 before 2.13.2...

Vulnerability fixed in Veeam

Veeam has fixed a vulnerability in the Veeam Updater component. The vulnerability is in how the Veeam Updater component validates TLS certificates. Insufficient validation can allow Man-in-the-Middle attackers to execute arbitrary code on affected servers. This can lead to unauthorized access and...

CVE-2025-1193

Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack by presenting a certificate for a different host...