The product does not validate, or incorrectly validates, a certificate.
1,454 vulnerabilities with CWE-295
CVE-2024-43107
HIGH
Gallagher MIP <4.0.32 - Unauthenticated RCE
CVSS 7.2
CVE-2024-41724
HIGH
Gallagher Command Centre <9.20.1043 - RCE
CVSS 8.7
CVE-2024-50394
HIGH
QNAP Helpdesk 3.3.1-3.3.2 - Improper Certificate Validation
CVSS 8.8
CVE-2024-41334
HIGH
Draytek Vigor Routers - Unauthenticated Arbitrary Code Execution via APPE Module Upload
CVSS 8.8
CVE-2024-55581
HIGH
Ada Web Server 25.0.0 - Improper Certificate Validation in AWS.Client
CVSS 7.4
CVE-2024-50691
HIGH
SunGrow iSolarCloud < 2.1.6.20241115 - Missing SSL Certificate Validation
CVSS 7.4
CVE-2024-49782
MEDIUM
IBM OpenPages with Watson <9.0 - SSRF
CVSS 6.8
CVE-2024-29171
MEDIUM
Dell BSAFE SSL-J < 6.6 and 7.0-7.2 - Improper Certificate Validation
CVSS 5.9
CVE-2024-11621
HIGH
Drm <2024.3.9.0 - Man-in-the-middle
CVSS 8.8
CVE-2024-47258
HIGH
2N Access Commander <3.3 - Man In The Middle
CVSS 8.1
CVE-2024-23970
MEDIUM
ChargePoint Home Flex Firmware - Unauthenticated Transport Security Compromise via CURLOPT_SSL_VERIFYHOST
CVSS 6.5
CVE-2024-23928
MEDIUM
Pioneer DMH-WT7600NEX Firmware - Unauthenticated Improper Certificate Validation in Telematics Functionality
CVSS 6.5
CVE-2024-52330
HIGH
ECOVACS Deebot and Lawnmower Firmware - Unauthenticated TLS Certificate Validation Bypass
CVSS 7.4
CVE-2024-52329
HIGH
ECOVACS HOME < 3.0.0 - Unauthenticated TLS Certificate Validation Bypass
CVSS 7.4
CVE-2024-42186
LOW
BigFix Patch Download Plug-ins - Info Disclosure
CVSS 2.8
CVE-2024-48460
MEDIUM
tabby-ssh < 1.0.214 - Improper Certificate Validation
CVSS 4.3
CVE-2024-54849
MEDIUM
CP Plus CP-VNR-3104 B3223P22C02424 - Improper Certificate Validation
CVSS 5.9
CVE-2024-54848
HIGH
CP Plus CP-VNR-3104 B3223P22C02424 - Improper Certificate Validation
CVSS 7.4
CVE-2024-54847
MEDIUM
CP Plus CP-VNR-3104 B3223P22C02424 - Improper Certificate Validation
CVSS 5.9
CVE-2024-54846
MEDIUM
CP Plus CP-VNR-3104 B3223P22C02424 - Improper Certificate Validation
CVSS 5.9
CVE-2024-40702
HIGH
IBM Cognos Controller <11.0.1 - Info Disclosure
CVSS 8.2
CVE-2024-56521
CRITICAL
TCPDF < 6.8.0 - Improper Certificate Validation via libcurl
CVSS 9.8
CVE-2024-47119
MEDIUM
IBM Storage Defender - Resiliency Service <2.0.10 - SSL Spoofing
CVSS 5.9
CVE-2024-6001
HIGH
Lenovo Accessories and Display Manager < 1.0.5.0.5 - Improper Certificate Validation
CVSS 8.1
CVE-2024-4762
HIGH
Lenovo Accessories and Display Manager <1.0.5.0.5 & Display Control Center <3.0.32161.0 - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities
1,454