11574 matches found
CVE-2025-70045
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTPS request options when 'jxobj.IsSecure' is true...
CVE-2025-70044
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3...
CVE-2025-70044
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3...
CVE-2025-70058
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests...
PT-2026-21525
Name of the Vulnerable Software and Affected Versions YMFE yapi version 1.12.0 Description The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests. This can lead to man-in-the-middle attacks where a malicio...
CVE-2025-70058
The YMFE yapi application, specifically version 1.12.0 , is vulnerable to Improper Certificate Validation (CWE-295). The root cause is the application's HTTPS agent configuration for Axios requests, which sets 'rejectUnauthorized': false, effectively disabling TLS/SSL certificate validation. This...
CVE-2025-70058: Improper Certificate Validation
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests...
CVE-2025-70058
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests...
PT-2026-21522
Name of the Vulnerable Software and Affected Versions jxcore jxm master Description The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTPS request options when jx obj.IsSecure is true. This improper certificate validation could allow for...
CVE-2025-70043
The Ayms node-To master application is vulnerable to CWE-295: Improper Certificate Validation because it explicitly sets the rejectUnauthorized option to false in its TLS socket options . This configuration disables TLS/SSL certificate validation, which may facilitate man-in-the-middle (MITM) att...
CVE-2025-70043
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options...
PT-2026-21520
Name of the Vulnerable Software and Affected Versions Ayms node-To master affected versions not specified Description The application disables TLS/SSL certificate validation by setting rejectUnauthorized to false in TLS socket options. This improper certificate validation could allow for...
CVE-2025-70043
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options...
CVE-2025-70045
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in HTTPS request options when 'jxobj.IsSecure' is true...
CVE-2025-70045
The jxm messaging backend (specifically jxcore jxm master ) is vulnerable to Improper Certificate Validation (CWE-295). The application incorrectly sets 'rejectUnauthorized': false in HTTPS request options when jx_obj.IsSecure is true. This flaw allows an attacker to perform a man-in-the-middle a...
CVE-2025-70044
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3...
PT-2026-21521
Name of the Vulnerable Software and Affected Versions fofolee uTools-quickcommand version 5.0.3 Description An issue exists regarding improper certificate validation in fofolee uTools-quickcommand. This can potentially allow for security compromises due to the lack of proper certificate checks...
CVE-2025-70044
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3...
CVE-2025-70044
The automated operation software fofolee uTools-quickcommand version 5.0.3 is affected by a security vulnerability (CWE-295) involving Improper Certificate Validation . This flaw stems from a lack of proper certificate checks, which can potentially lead to security compromises. As of the current ...