CWE-295

1,395 vulnerabilities with CWE-295

CVE-2025-29883 HIGH

File Station 5 <5.5.6.4791 - Improper Certificate Validation

CVSS 8.8

CVE-2025-22486 HIGH

QNAP File Station 5.5.6.4691-5.5.6.4791 - Improper Certificate Validation

CVSS 8.8

CVE-2025-5025 MEDIUM

curl 8.5.0-8.13.9 - Improper Certificate Validation in QUIC HTTP/3 with wolfSSL

CVSS 4.8

CVE-2025-4947 MEDIUM

curl 8.8.0-8.13.0 - Improper Certificate Validation for QUIC Connections via IP Address URL

CVSS 6.5

CVE-2025-5279 HIGH

Amazon Redshift Python Connector 2.0.872-2.1.7 - Improper Certificate Validation

CVE-2025-4575 MEDIUM

OpenSSL 3.5 - Improper Certificate Validation via -addreject Option

CVSS 6.5

CVE-2025-32407 MEDIUM

Samsung Internet for Galaxy Watch 5.0.9 - Improper Certificate Validation

CVSS 5.9

CVE-2025-3463 CRITICAL

ASUS DriverHub - Improper Certificate Validation via Crafted HTTP Requests

CVE-2025-20157 MEDIUM

Cisco Catalyst SD-WAN Manager - Info Disclosure

CVSS 5.9

CVE-2025-46551 LOW

JRuby-OpenSSL 0.12.1-0.15.3 and JRuby 9.3.4.0-9.4.12.0 and 10.0.0.0 - Improper Certificate Validation

CVSS 3.7

CVE-2025-3218 MEDIUM

IBM i 7.2-7.6 - Improper Certificate Validation in Netserver

CVSS 5.4

CVE-2025-37730 MEDIUM

Logstash 8.0.0-8.17.5, 8.18.0, 9.0.0 - Improper Certificate Validation in TCP Output

CVSS 6.5

CVE-2025-20670 MEDIUM

MediaTek NR16 NR17 NR17R - Remote Information Disclosure via Improper Certificate Validation

CVSS 5.7

CVE-2025-27820 HIGH

Apache HttpClient 5.4-5.4.2 - Improper Certificate Validation in PSL Domain Check Logic

CVSS 7.5

CVE-2025-28169 HIGH

BYD QIN PLUS DM-i Dilink OS - Info Disclosure

CVSS 8.1

CVE-2025-26478 LOW

Dell ECS < 3.8.1.4 & ObjectScale < 4.0.0.0 - Unauthenticated Info Disclosure via Cert Validation

CVSS 3.1

CVE-2025-22459 MEDIUM

Ivanti Endpoint Manager <2024 SU1, <2022 SU7 - Info Disclosure

CVSS 4.8

CVE-2025-30000 MEDIUM

Siemens License Server <V4.3 - Privilege Escalation

CVSS 6.7

CVE-2025-0254 MEDIUM

HCL Digital Experience <9.5 CF226 - SSRF

CVSS 5.9

CVE-2025-23118 MEDIUM

UniFi Protect < - Privilege Escalation

CVSS 6.4

CVE-2025-1001 MEDIUM

Medixant RadiAnt DICOM Viewer - MITM

CVSS 5.7

CVE-2025-1002 MEDIUM

MicroDicom DICOM Viewer 2024.03 - MITM

CVSS 5.7

CVE-2025-1193 HIGH

Devolutions Remote Desktop Manager < 2024.3.20.0 - Improper Certificate Validation

CVSS 8.1

CVE-2025-23114 CRITICAL

Veeam Backup for AWS < 7.0 - Remote Code Execution via TLS Certificate Validation Failure

CVSS 9.0

CVE-2025-1014 HIGH

Firefox < 128.7.0 and < 135.0 - Improper Certificate Validation

CVSS 8.8