CWE-295

1,454 vulnerabilities with CWE-295

CVE-2023-24568 MEDIUM

Dell NetWorker - SSL/TLS Validation Bypass

CVSS 5.0

CVE-2023-28321 MEDIUM

curl < 8.1.0 - Improper Certificate Validation via Wildcard Pattern Matching

CVSS 5.9

CVE-2023-1664 MEDIUM

Keycloak - Auth Bypass

CVSS 6.5

CVE-2023-20881 HIGH

Cloud Foundry CAPI 1.140-1.152.0 & Loggregator-Agent 7.0-7.2.1 - Improper Certificate Validation in Syslog Drain MTLS

CVSS 8.1

CVE-2023-32994 LOW

Jenkins SAML Single Sign On Plugin < 2.1.0 - Improper Certificate Validation

CVSS 3.7

CVE-2023-27823 CRITICAL

Optoma 1080PSTX C02 - Unauthenticated Authentication Bypass

CVSS 9.8

CVE-2023-31151 MEDIUM

SEL RTAC Web Interface - Man-in-the-Middle via Certificate Validation

CVSS 4.7

CVE-2023-23901 MEDIUM

SkyBridge MB-A200 <01.00.05 - Info Disclosure

CVSS 6.5

CVE-2023-24461 HIGH

BIG-IP Edge Client - Improper Certificate Validation

CVSS 7.4

CVE-2023-31486 HIGH

HTTP::Tiny <0.083 - Info Disclosure

CVSS 8.1

CVE-2023-31485 MEDIUM

GitLab::API::v4-0.26 - Info Disclosure

CVSS 5.9

CVE-2023-31484 HIGH

CPAN.pm <2.35 - Info Disclosure

CVSS 8.1

CVE-2023-26463 CRITICAL

strongSwan 5.9.8-5.9.9 - Remote Code Execution via EAP-TLS Client Certificate Handling

CVSS 9.8

CVE-2023-30517 MEDIUM

Jenkins NeuVector Vulnerability Scanner < 1.22 - Improper Certificate Validation

CVSS 5.3

CVE-2023-30516 MEDIUM

Jenkins Image Tag Parameter Plugin < 2.0 - Improper Certificate Validation

CVSS 6.5

CVE-2023-22642 HIGH

FortiAnalyzer & FortiManager 6.4.8-6.4.10, 7.0.0-7.0.5, 7.2.0-7.2.1 - MITM via Improper Cert Validation

CVSS 7.5

CVE-2023-23588 MEDIUM

SIMATIC IPC647D, IPC847D, IPC1047 Firmware - Improper Certificate Validation in Maxview Storage Manager

CVSS 6.2

CVE-2023-28093 MEDIUM

Pega Synchronization Engine 3.1.1-3.1.29 - Improper Certificate Validation

CVSS 6.5

CVE-2023-25392 MEDIUM

Allegro BigFlow < 1.6 - Improper Certificate Validation

CVSS 5.9

CVE-2023-29000 MEDIUM

Nextcloud Desktop <3.7.0 - Info Disclosure

CVSS 5.4

CVE-2023-0466 MEDIUM

OpenSSL 1.0.2-1.0.2zh - Improper Certificate Validation via X509_VERIFY_PARAM_add0_policy

CVSS 5.3

CVE-2023-0465 MEDIUM

OpenSSL 1.0.2-1.0.2zh - Improper Certificate Validation via Policy Processing

CVSS 5.3

CVE-2023-20963 HIGH KEV

Android - Local Privilege Escalation via WorkSource Parcel Mismatch

CVSS 7.8

CVE-2023-0464 HIGH

OpenSSL 1.0.2-1.0.2zh - Denial of Service via Malicious X.509 Certificate Chain with Policy Constraints

CVSS 7.5

CVE-2023-1055 MEDIUM

Red Hat Directory Server 11 and 12 - Sensitive Information Disclosure via UserPassword Attribute Misdirection

CVSS 5.5