CWE-295

1,400 vulnerabilities with CWE-295

CVE-2021-20732 MEDIUM

ATOM <1.8.1-1.8.2 - Info Disclosure

CVSS 5.9

CVE-2021-21559 HIGH

Dell EMC NetWorker 18.x-19.4.0.1 - Unauthenticated Man-in-the-Middle via Improper Certificate Validation

CVSS 7.1

CVE-2021-22218 LOW

GitLab 12.8-13.10.4, 13.11-13.11.4, 13.12-13.12.1 - Improper Certificate Validation

CVSS 2.6

CVE-2021-29504 CRITICAL

WP-CLI 0.12.0-2.4.9 - Improper Certificate Validation in HTTP Request Handler

CVSS 9.1

CVE-2021-24012 MEDIUM

FortiOS 6.4.0-6.4.4 - Improper Certificate Validation in LDAP SSLVPN Authentication

CVSS 6.5

CVE-2021-22909 HIGH

EdgeMAX EdgeRouter Firmware < 2.0.9 - Improper Certificate Validation

CVSS 7.5

CVE-2021-22138 LOW

Logstash 6.4.0-6.8.14 - Improper Certificate Validation in Monitoring Feature

CVSS 3.7

CVE-2021-32919 HIGH

prosody 0.10.0-0.11.8 - Improper Certificate Validation in mod_dialback

CVSS 7.5

CVE-2021-29495 MEDIUM

Nim < 1.4.2 - Improper Certificate Validation in HTTP Client

CVSS 5.9

CVE-2021-20695 HIGH

DAP-1880AC <1.21 - Privilege Escalation

CVSS 8.8

CVE-2021-31597 CRITICAL

xmlhttprequest-ssl < 1.6.1 - Improper Certificate Validation

CVSS 9.4

CVE-2021-29653 HIGH

HashiCorp Vault 1.5.1-1.5.7 - Improper Certificate Validation in PKI Engine CRL Generation

CVSS 7.5

CVE-2021-27400 HIGH

HashiCorp Vault <1.6.4, <1.7.1 - Info Disclosure

CVSS 7.5

CVE-2021-20989 MEDIUM

Fibaro Home Center 2 & Lite <4.600 - SSRF

CVSS 5.9

CVE-2021-3460 HIGH

Motorola MH702x Firmware < 2.0.0.301 - Improper Certificate Validation

CVSS 8.1

CVE-2021-22511 MEDIUM

Micro Focus Application Automation Tools Plugin < 6.7 - Improper Certificate Validation

CVSS 6.5

CVE-2021-27899 HIGH

Proofpoint Insider Threat Management < 7.11.1 - Improper Certificate Validation

CVSS 7.4

CVE-2021-21374 HIGH

Nim <1.2.10 and 1.4.4 - Code Execution via Nimble Package List Man-in-the-Middle

CVSS 8.1

CVE-2021-21373 HIGH

Nim < 1.2.10 - Improper Certificate Validation via Nimble Refresh Fallback

CVSS 7.5

CVE-2021-3450 HIGH

OpenSSL 1.1.1h-1.1.1j - Certificate Chain Validation Bypass via X509_V_FLAG_X509_STRICT

CVSS 7.4

CVE-2021-21385 HIGH

Mifos-Mobile <e505f62 - SSL/TLS Info Disclosure

CVSS 8.8

CVE-2021-1471 CRITICAL

Cisco Jabber < 12.1.5, < 12.8.7, < 12.9.0 - Privilege Escalation and Information Disclosure

CVSS 9.9

CVE-2021-28363 MEDIUM

urllib3 1.26.0-1.26.3 - Improper Certificate Validation in HTTPS Proxy Connections

CVSS 6.5

CVE-2021-27257 MEDIUM

NETGEAR R7800 <1.0.2.76 - Info Disclosure

CVSS 6.5

CVE-2021-27098 HIGH

SPIRE 0.8.1-0.12.0 - Improper Certificate Validation in Legacy Node API

CVSS 8.1