73 matches found
PT-2020-9803
Name of the Vulnerable Software and Affected Versions Nutfind.com application versions 3.9.12 and earlier Description The issue allows a man-in-the-middle attacker to sniff and manipulate all API requests, including login credentials and location data, due to missing SSL Certificate Validation in...
CVE-2020-13245
CVE-2020-13245 affects NETGEAR routers, notably the R7000 (versions 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10) and possibly additional models (R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, R7000P). The root cause is Missing SSL Certificate Va...
CVE-2020-13245: Improper Certificate Validation
Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.61.2.19 through 1.0.11.10010.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, and R7000P...
PT-2020-13392
Name of the Vulnerable Software and Affected Versions NETGEAR R7000 versions 1.0.9.6 1.2.19 through 1.0.11.100 10.2.10 NETGEAR R6120 affected versions not specified NETGEAR R7800 affected versions not specified NETGEAR R6220 affected versions not specified NETGEAR R8000 affected versions not...
CVE-2020-12637
Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option...
CVE-2020-12637: Improper Certificate Validation
Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option...
CVE-2019-11688: Improper Certificate Validation
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...
PT-2020-9200
Name of the Vulnerable Software and Affected Versions ASUSTOR exFAT Driver versions 1.0.0.r20 and earlier Description An issue was discovered in the license validation process of the ASUSTOR exFAT Driver. Specifically, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com,...
CVE-2020-6175: Improper Certificate Validation
Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation...
Huawei EulerOS: Security Advisory for elinks (EulerOS-SA-2019-2376)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2019-12377
Name of the Vulnerable Software and Affected Versions Audible application versions through 2.34.0 for Android Description The issue concerns missing SSL certificate validation for Adobe SDKs in the Audible application, allowing man-in-the-middle MITM attackers to cause a denial of service...
CVE-2019-11554: Improper Certificate Validation
The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service...
CVE-2019-15525
There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...
CVE-2019-15525: Improper Certificate Validation
There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...
PT-2019-14245
Name of the Vulnerable Software and Affected Versions pw3270 versions prior to 5.1 Description The issue concerns a missing SSL certificate validation in the terminal emulator. Recommendations For versions prior to 5.1, update to version 5.1 or later to resolve the issue...
Design/Logic Flaw
OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...
CVE-2019-1010206: Improper Certificate Validation
OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...
PT-2019-8252
Name of the Vulnerable Software and Affected Versions ASUS HiVivo application versions prior to 5.6.27 for ASUS Watch Description The issue concerns missing SSL certificate validation in the ASUS HiVivo application. This could potentially allow for man-in-the-middle attacks or other security...