The product does not validate, or incorrectly validates, a certificate.
1,401 vulnerabilities with CWE-295
CVE-2017-14582
MEDIUM
Zoho Site24x7 Mobile Network Poller <1.1.5 - Info Disclosure
CVSS 5.9
CVE-2017-12228
MEDIUM
Cisco Network Plug and Play - Info Disclosure
CVSS 5.9
CVE-2017-7971
MEDIUM
Schneider Electric PowerSCADA Anywhere 1.0 and Citect Anywhere 1.0 - Improper Certificate Validation
CVSS 6.5
CVE-2017-2299
HIGH
Puppetlabs-apache <1.11.1-2.1.0 - Info Disclosure
CVSS 7.5
CVE-2017-14420
MEDIUM
D-Link DIR-850L Firmware <= FW114WWb07_h2ab_beta1 - Improper Certificate Validation
CVSS 5.9
CVE-2017-14419
MEDIUM
D-Link DIR-850L Firmware - Improper Certificate Validation in mydlink Cloud Services
CVSS 5.9
CVE-2017-6594
HIGH
Heimdal < 7.3 - Improper Certificate Validation via Transit Path Bypass
CVSS 7.5
CVE-2017-8445
MEDIUM
Elastic X-Pack Security 5.0.0-5.5.1 - Improper Certificate Validation in TLS Trust Manager
CVSS 5.5
CVE-2017-11506
HIGH
Nessus < 6.11 - Improper Certificate Validation
CVSS 7.4
CVE-2017-7932
MEDIUM
NXP i.MX and Vybrid Firmware - Improper Certificate Validation
CVSS 6.0
CVE-2017-6664
HIGH
Cisco IOS XE 16.x - Unauthenticated Autonomic Networking Access via Revoked Certificate
CVSS 7.5
CVE-2017-10819
MEDIUM
MaLion for Mac 4.3.0-5.2.1 - Improper Certificate Validation
CVSS 5.9
CVE-2017-2278
MEDIUM
RBB SPEED TEST App for Android <= 2.0.3 and iOS <= 2.1.0 - Improper Certificate Validation
CVSS 5.9
CVE-2017-11364
HIGH
Joomla! - Authenticated Application Takeover via Certificate Transparency Log Abuse
CVSS 8.8
CVE-2017-11132
HIGH
StashCat < 1.5.17 - Improper Certificate Validation
CVSS 7.5
CVE-2017-11501
MEDIUM
NixOS < 17.03 - Improper Certificate Validation in LDAP PAM Module
CVSS 5.9
CVE-2017-1000007
MEDIUM
txaws < 0.4.0 - Exposure of Sensitive Information via Incomplete Certificate Verification
CVSS 5.9
CVE-2017-7726
HIGH
iSmartAlarm cube devices - SSL Certificate Validation Vuln
CVSS 7.5
CVE-2017-7406
CRITICAL
D-Link DIR-615 <20.12PTb04 - Info Disclosure
CVSS 9.8
CVE-2017-3218
HIGH
Samsung Magician < 5.1 - Improper Certificate Validation
CVSS 8.8
CVE-2017-9601
MEDIUM
FNB Kemp Mobile Banking <3.0.2 - XSS
CVSS 5.9
CVE-2017-9600
MEDIUM
Peoples Bank Tulsa - OK app 3.0.2 - XSS
CVSS 5.9
CVE-2017-9599
MEDIUM
FOUNTAIN TRUST COMPANY app <3.2.0 - Info Disclosure
CVSS 5.9
CVE-2017-9598
MEDIUM
Morton Credit Union Mobile Banking 3.0.1 - XSS
CVSS 5.9
CVE-2017-9597
MEDIUM
Blue Ridge Bank and Trust Co. Mobile Banking 3.0.1 - XSS
CVSS 5.9
Details
Vulnerabilities
1,401