IBM Concert encryption problem vulnerabilities

The IBM Concert versions 1.0 to 3.0.0 have encryption-related vulnerabilities, which stem from improper certificate verification...

Diem project Diem authorization issue vulnerability

The Diem project has a security vulnerability. This vulnerability stems from improper handling of unknown functions in the dmCorePlugin/lib/vendor/gapi/gapi.class.php file, which is part of the Google Analytics Client component. This could lead to improper certificate verification, allowing remot...

OpenTelemetry - CNCF OpenTelemetry Python encryption issue vulnerability

OpenTelemetry – CNCF OpenTelemetry has a security vulnerability in versions 1.5.0 to 1.45.0 of the Python library. This vulnerability stems from improper certificate verification. When the OTELEXPORTEROTLPCERTIFICATE variable is an empty string, TLS verification is disabled, allowing...

Lenovo Smart Camera C33 encryption issue vulnerability

Versions of the Lenovo Smart Camera C33 prior to 05.02.31.140 have a security vulnerability related to improper certificate verification. This vulnerability may cause adjacent users to intercept or manipulate network communications...

SBABIC SWUpdate encryption vulnerability

The SBABIC SWUpdate 2026.05.1 and earlier versions have a cryptographic vulnerability. This vulnerability stems from improper certificate verification in the crypto/swupdatecmsverifyopenssl.c file. Trusted X.509 certificates that are embedded in CMS SignedData are used to build the certificate...

CVE-2026-9058

The Szafir SDK is affected by an improper certificate verification issue where the verification process returns success (Result/@code == 0) even when the signer certificate trust status is nondetermined. This leads consuming applications to treat signatures as valid despite an unverified certific...

Dell PowerFlex Manager Trust Management Vulnerability

Dell PowerFlex Manager is a management tool developed by Dell, Inc. Versions of Dell PowerFlex Manager prior to 4.6.2 contained a trust management vulnerability. This vulnerability stemmed from improper certificate verification, which could allow unauthenticated attackers with access to adjacent...

Ivanti Secure Access Client Trust Management Vulnerability

Ivanti Secure Access Client is a security software client developed by the American company Ivanti. Versions of Ivanti Secure Access Client prior to 22.8R6 contained a vulnerability related to trust management. This vulnerability stemmed from improper certificate verification, which could allow...

CVE-2026-33779: Improper Following of a Certificate's Chain of Trust

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

EUVD-2019-20043

UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network attackers to conduct man-in-the-middle attacks by presenting a false SSL certificate during SMTP connections. Attackers can intercept...

uTools-quickcommand security vulnerability

uTools-quickcommand is an automated operation software developed by fofolee. Version uTools-quickcommand 5.0.3 has a security vulnerability, which stems from improper certificate verification...

B&R Automation Studio Trust Management Vulnerability

B&R Automation Studio is an integrated development environment provided by the Austrian company B&R. Versions of B&R Automation Studio prior to version 6.5 contained a trust management vulnerability. This vulnerability stemmed from improper verification of OPC-UA client and ANSL over TLS client...

EUVD-2020-17279

Malware in sbrugna...

CVE-2024-29171

Dell BSAFE SSL-J is affected by an improper certificate verification vulnerability (CVE-2024-29171). Affected versions are prior to 6.6 and 7.0–7.2. The issue enables potential information disclosure due to certificate validation flaws. Remediation is to upgrade: for versions prior to 6.6, move t...

CVE-2024-29171

Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2024-29171: Improper Certificate Validation

Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker could potentially exploit this vulnerability, leading to information disclosure...

Multiple Safie products vulnerable to improper server certificate verification

Overview Multiple Safie products are vulnerable to improper server certificate verification CWE-295. The product can be operated via port 11029/TCP and Bluetooth, and its communications are AES encrypted. The product user can obtain the encryption key from the cloud server based on the...

Toyoko Inn official App vulnerable to improper server certificate verification

Overview Toyoko Inn official App provided by Toyoko Inn IT Solution Co., Ltd. is vulnerable to improper server certificate verification CWE-295. Ryo Nihonyanagi of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...

"Jiyu Kukan Toku-Toku coupon" App vulnerable to improper server certificate verification

Overview "Jiyu Kukan Toku-Toku coupon" App provided by RUNSYSTEM CO.,LTD. is vulnerable to improper server certificate verification CWE-295. Ryo Nihonyanagi of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

PT-2023-18461

Name of the Vulnerable Software and Affected Versions Ichiran App for iOS versions prior to 3.1.0 Ichiran App for Android versions prior to 3.1.0 Description The issue is related to improper server certificate verification, which may allow a remote unauthenticated attacker to eavesdrop on an...