The product does not validate, or incorrectly validates, a certificate.
1,454 vulnerabilities with CWE-295
CVE-2025-30000
MEDIUM
Siemens License Server <V4.3 - Privilege Escalation
CVSS 6.7
CVE-2025-0254
MEDIUM
HCL Digital Experience <9.5 CF226 - SSRF
CVSS 5.9
CVE-2025-23118
MEDIUM
UniFi Protect < - Privilege Escalation
CVSS 6.4
CVE-2025-1001
MEDIUM
Medixant RadiAnt DICOM Viewer - MITM
CVSS 5.7
CVE-2025-1002
MEDIUM
MicroDicom DICOM Viewer 2024.03 - MITM
CVSS 5.7
CVE-2025-1193
HIGH
Devolutions Remote Desktop Manager < 2024.3.20.0 - Improper Certificate Validation
CVSS 8.1
CVE-2025-23114
CRITICAL
Veeam Backup for AWS < 7.0 - Remote Code Execution via TLS Certificate Validation Failure
CVSS 9.0
CVE-2025-1014
HIGH
Firefox < 128.7.0 and < 135.0 - Improper Certificate Validation
CVSS 8.8
CVE-2025-23091
MEDIUM
Ubiquiti UniFi OS < 4.1.13 - Improper Certificate Validation
CVSS 5.9
CVE-2025-0501
HIGH
Amazon WorkSpaces - Man-In-The-Middle
CVSS 7.5
CVE-2025-0500
HIGH
Amazon WorkSpaces, AppStream, and DCV Clients - Certificate Validation Session Exposure
CVSS 7.5
CVE-2025-20126
MEDIUM
Cisco ThousandEyes Endpoint Agent - Info Disclosure
CVSS 4.8
CVE-2025-0239
MEDIUM
Firefox < 134 & Thunderbird < 128.6 - SSL Validation
CVSS 4.0
CVE-2024-47477
MEDIUM
Dell PowerFlex Manager - Improper Certificate Validation
CVSS 6.5
CVE-2024-14024
MEDIUM
QNAP Video Station 5.0.0-5.8.1 - Improper Certificate Validation
CVSS 6.7
CVE-2024-13990
CRITICAL
MicroWorld eScan AV - Unauthenticated Remote Code Execution via Update Mechanism Man-in-the-Middle Attack
CVE-2024-31854
HIGH
SICAM TOOLBOX II < V07.11 - Man-in-the-Middle
CVSS 8.1
CVE-2024-31853
HIGH
SICAM TOOLBOX II < V07.11 - Man-in-the-Middle
CVSS 8.1
CVE-2024-13956
MEDIUM
ASPECT <3.* - SSL Verification Bypass
CVSS 6.7
CVE-2024-45641
MEDIUM
IBM Security ReaQta EDR 3.12-3.12.16 - Improper SSL Certificate Validation
CVSS 6.5
CVE-2024-47619
HIGH
syslog-ng < 4.8.2 - Improper Certificate Validation in TLS Wildcard Matching
CVSS 7.5
CVE-2024-42193
HIGH
HCL BigFix Platform 10.0.0-10.0.12 - Improper Certificate Validation
CVSS 8.1
CVE-2024-10445
MEDIUM
Synology BeeStation OS < 1.1-65374 and DiskStation Manager < 6.2.4-25556-8 - Improper Certificate Validation
CVSS 4.3
CVE-2024-10444
HIGH
Synology DiskStation Manager < 7.1.1-42962-8 - Improper Certificate Validation in LDAP Utilities
CVSS 7.5
CVE-2024-40590
MEDIUM
FortiPortal <7.4.0 - Info Disclosure
CVSS 4.8
Details
Vulnerabilities
1,454