CVE-2026-9058

The Szafir SDK is affected by an improper certificate verification issue where the verification process returns success (Result/@code == 0) even when the signer certificate trust status is nondetermined. This leads consuming applications to treat signatures as valid despite an unverified certific...

Dell PowerFlex Manager 信任管理问题漏洞

Dell PowerFlex Manager is a management tool developed by Dell, Inc. Versions of Dell PowerFlex Manager prior to 4.6.2 contained a trust management vulnerability. This vulnerability stemmed from improper certificate verification, which could allow unauthenticated attackers with access to adjacent...

Ivanti Secure Access Client 信任管理问题漏洞

Ivanti Secure Access Client is a security software client developed by the American company Ivanti. Versions of Ivanti Secure Access Client prior to 22.8R6 contained a vulnerability related to trust management. This vulnerability stemmed from improper certificate verification, which could allow...

CVE-2026-33779: Improper Following of a Certificate's Chain of Trust

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

EUVD-2019-20043

UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network attackers to conduct man-in-the-middle attacks by presenting a false SSL certificate during SMTP connections. Attackers can intercept...

uTools-quickcommand 安全漏洞

uTools-quickcommand is an automated operation software developed by fofolee. Version uTools-quickcommand 5.0.3 has a security vulnerability, which stems from improper certificate verification...

B&R Automation Studio Trust Management Vulnerability

B&R Automation Studio is an integrated development environment provided by the Austrian company B&R. Versions of B&R Automation Studio prior to version 6.5 contained a trust management vulnerability. This vulnerability stemmed from improper verification of OPC-UA client and ANSL over TLS client...

EUVD-2020-17279

Malware in sbrugna...

CVE-2024-29171

Dell BSAFE SSL-J is affected by an improper certificate verification vulnerability (CVE-2024-29171). Affected versions are prior to 6.6 and 7.0–7.2. The issue enables potential information disclosure due to certificate validation flaws. Remediation is to upgrade: for versions prior to 6.6, move t...

CVE-2024-29171

Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2024-29171: Improper Certificate Validation

Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker could potentially exploit this vulnerability, leading to information disclosure...

Multiple Safie products vulnerable to improper server certificate verification

Overview Multiple Safie products are vulnerable to improper server certificate verification CWE-295. The product can be operated via port 11029/TCP and Bluetooth, and its communications are AES encrypted. The product user can obtain the encryption key from the cloud server based on the...

Toyoko Inn official App vulnerable to improper server certificate verification

Overview Toyoko Inn official App provided by Toyoko Inn IT Solution Co., Ltd. is vulnerable to improper server certificate verification CWE-295. Ryo Nihonyanagi of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...

"Jiyu Kukan Toku-Toku coupon" App vulnerable to improper server certificate verification

Overview "Jiyu Kukan Toku-Toku coupon" App provided by RUNSYSTEM CO.,LTD. is vulnerable to improper server certificate verification CWE-295. Ryo Nihonyanagi of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

PT-2023-18461

Name of the Vulnerable Software and Affected Versions Ichiran App for iOS versions prior to 3.1.0 Ichiran App for Android versions prior to 3.1.0 Description The issue is related to improper server certificate verification, which may allow a remote unauthenticated attacker to eavesdrop on an...

PT-2022-19647

Name of the Vulnerable Software and Affected Versions Mobaoku-Auction&Flea Market App for iOS versions prior to 5.5.16 Description The issue is related to improper server certificate verification, which may allow an attacker to eavesdrop on encrypted communication via a man-in-the-middle attack...

Mobaoku-Auction & Flea Market App for iOS vulnerable to improper server certificate verification

Overview Mobaoku-Auction & Flea Market App for iOS provided by DeNA Co., Ltd. is vulnerable to improper server certificate verification CWE-295. Okazawa Yoshihiro reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

PT-2022-10825

Name of the Vulnerable Software and Affected Versions Motorola Ready For and Motorola Device Help Android applications versions prior to 2021-04-08 Description The issue is related to the improper verification of the server certificate in the affected applications, which could allow an attacker t...

ATOM - Smart life App vulnerable to improper server certificate verification

Overview ATOM - Smart life App provided by ATOM tech Inc. is vulnerable to improper server certificate verification CWE-295. Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

PT-2020-18644

Name of the Vulnerable Software and Affected Versions iSM client versions from V5.1 prior to V12.1 Description The issue allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter the communication via a crafted certificate, as the iSM client does not verify a server...