73 matches found
CVE-2023-25392
Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...
CVE-2023-25392
Allegro Tech BigFlow 1.6 is vulnerable to Missing SSL Certificate Validation...
CVE-2022-45597
The CVE-2022-45597 entry concerns ComponentSpace.Saml2 4.4.0 with missing SSL certificate validation at the application layer. Root cause: improper handling of SSL certificates within the library, contrasted with transport-layer validation. Impact is described as high confidentiality, integrity, ...
PT-2023-14947
Name of the Vulnerable Software and Affected Versions BTicino Door Entry HOMETOUCH for iOS version 1.4.2 Description The issue is related to the absence of an SSL certificate in the BTicino Door Entry HOMETOUCH for iOS application. This lack of encryption could potentially expose user data to...
CVE-2022-46496: Improper Certificate Validation
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate...
CVE-2022-42131
Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : busybox (SUSE-SU-2022:3959-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3959-1 advisory. - Enable switchroot With this change virtme --force-initramfs works as expected. - Enable udhcpc...
CVE-2021-31747
Missing SSL Certificate Validation issue exists in Pluck 4.7.15 in updateapplet.php, which could lead to man-in-the-middle attacks...
CVE-2021-31747
CVE-2021-31747 : In Pluck 4.7.15, the code path update_applet.php omits SSL certificate validation, enabling potential man-in-the-middle attacks. Affected component is the update mechanism in Pluck-CMS; impact is limited to MITM risk described in multiple sources (e.g., NVD/Red Hat/CNVD entries)....
CVE-2021-36756: Improper Certificate Validation
CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation...
CVE-2021-26911
core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode...
PT-2021-17168
Name of the Vulnerable Software and Affected Versions: Canary Mail versions prior to 3.22 Description: The issue is related to missing SSL certificate validation for IMAP in STARTTLS mode. This affects the core/imap/MCIMAPSession.cpp file in Canary Mail. Recommendations: For versions prior to 3.2...
CVE-2020-24715
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltName...
CVE-2020-24714: Improper Certificate Validation
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verifyhostname option...
PT-2020-15825
Name of the Vulnerable Software and Affected Versions Scalyr Agent versions prior to 2.1.10 Description The issue is related to missing SSL certificate validation. In certain circumstances, the openssl binary is called without the -verify hostname option, which can lead to security problems...
CVE-2020-14981
The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation...
CVE-2020-14980
The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation...
CVE-2020-14981
The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation...