CVE-2020-5522: Improper Certificate Validation

The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2020-5520: Improper Certificate Validation

The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2020-5521: Improper Certificate Validation

The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2020-8077

Name of the Vulnerable Software and Affected Versions: SUSE Studio onsite susestudio-common versions 1.3.17-56.6.3 and prior versions. Description: The issue is related to an Improper Certificate Validation vulnerability, allowing remote attackers to perform a man-in-the-middle MITM attack on...

CVE-2017-14806: Improper Certificate Validation

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...

CVE-2006-7246: Improper Certificate Validation

NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used...

CVE-2020-3940: Improper Certificate Validation

VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability...

CVE-2012-1316: Improper Certificate Validation

Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks...

CVE-2020-1929: Improper Certificate Validation

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

CVE-2020-0601: Improper Certificate Validation

A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...

CVE-2014-0161: Improper Certificate Validation

ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name CN or subjectAltName as specified by its x.509 certificate in a TLS/SSL session. This could allow man-in-the-middle attackers to spoof remote endpoints via an...

CVE-2014-0104: Improper Certificate Validation

In fence-agents before 4.0.17 does not verify remote SSL certificates in the fenceciscoucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL servers via arbitrary SSL certificates...

CVE-2019-6032: Improper Certificate Validation

The NTV News24 prior to Ver.3.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2019-6687: Improper Certificate Validation

On versions 15.0.0-15.0.1.1, the BIG-IP ASM Cloud Security Services profile uses a built-in verification mechanism that fails to properly authenticate the X.509 certificate of remote endpoints...

CVE-2019-16558: Improper Certificate Validation

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM...

CVE-2019-16561: Improper Certificate Validation

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM...

CVE-2018-11751: Improper Certificate Validation

Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0...

CVE-2019-18826: Improper Certificate Validation

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, does not properly validate the whole certificate chain...

CVE-2014-3495: Improper Certificate Validation

duplicity 0.6.24 has improper verification of SSL certificates...

CVE-2011-2207: Improper Certificate Validation

dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service DOS via a specially-crafted certificate...