The product does not validate, or incorrectly validates, a certificate.
1,400 vulnerabilities with CWE-295
CVE-2020-28362
HIGH
GO < 1.14.12 - Improper Certificate Validation
CVSS 7.5
CVE-2020-27589
HIGH
Synopsys hub-rest-api-python <0.0.53 - Info Disclosure
CVSS 7.5
CVE-2020-27649
HIGH
Synology Router Manager <1.2.4-8081 - Info Disclosure
CVSS 8.3
CVE-2020-27648
HIGH
Synology DSM <6.2.3-25426-2 - Info Disclosure
CVSS 8.3
CVE-2020-9868
CRITICAL
iPadOS < 13.6 - Improper Certificate Validation
CVSS 9.1
CVE-2020-3557
MEDIUM
Cisco Secure Firewall Management Center < 6.6.1 - Unauthenticated Denial of Service via Host Input API Daemon
CVSS 5.3
CVE-2020-3994
HIGH
VMware vCenter Server 6.7 < 6.7u3 and 6.5 < 6.5u3k - Session Hijack via Update Repository Certificate Validation Bypass
CVSS 7.4
CVE-2020-1675
HIGH
Juniper Networks Mist Cloud UI <September 2 2020 - Info Disclosure
CVSS 8.3
CVE-2020-13955
MEDIUM
Apache Calcite < 1.26 - Improper Certificate Validation in HttpUtils#getURLConnection
CVSS 5.9
CVE-2020-26117
HIGH
TigerVNC < 1.11.0 - Improper Certificate Validation
CVSS 8.1
CVE-2020-24560
HIGH
Trend Micro Security 2019 (v15) - SSL Validation
CVSS 7.5
CVE-2020-15604
HIGH
Trend Micro Security 2019 < 15.0 - Improper Certificate Validation
CVSS 7.5
CVE-2020-4340
MEDIUM
IBM Security Secret Server < 10.9 - SSL Security Bypass via Improper Certificate Validation
CVSS 4.3
CVE-2020-24619
MEDIUM
Shotcut <20.09.13 - Info Disclosure
CVSS 5.9
CVE-2020-6781
MEDIUM
Bosch Smart Home System App for iOS < 9.17.1 - Improper Certificate Validation
CVSS 6.8
CVE-2020-2253
MEDIUM
Jenkins Email Extension Plugin <2.75 - Info Disclosure
CVSS 4.8
CVE-2020-2252
MEDIUM
Jenkins Mailer Plugin <1.32 - Info Disclosure
CVSS 4.8
CVE-2020-25276
HIGH
PrimeKey EJBCA 6.x-7.x < 7.4.1 - Improper Certificate Validation in EST Client Certificate Revocation Check
CVSS 7.3
CVE-2020-11617
MEDIUM
THOMSON THT741FTA and Philips DTR3502BFTA DVB-T2 Firmware 2.2.1 - Improper Certificate Validation in RSS Application
CVSS 5.9
CVE-2020-24715
CRITICAL
Scalyr Agent < 2.1.10 - Missing SSL Certificate Validation
CVSS 9.8
CVE-2020-24714
CRITICAL
Scalyr Agent < 2.1.10 - Missing SSL Certificate Validation via OpenSSL Binary
CVSS 9.8
CVE-2020-24661
MEDIUM
GNOME Geary <3.36.3 - Info Disclosure
CVSS 5.9
CVE-2020-5913
HIGH
BIG-IP <15.1.3.4 - Info Disclosure
CVSS 7.4
CVE-2020-15498
MEDIUM
ASUS RT-AC1900P Firmware < 3.0.0.4.385.20253 - Improper Certificate Validation via wget --no-check-certificate Option
CVSS 5.9
CVE-2020-16197
MEDIUM
Octopus Server - Improper Certificate Validation
CVSS 4.3
Details
Vulnerabilities
1,400