The product does not validate, or incorrectly validates, a certificate.
1,401 vulnerabilities with CWE-295
CVE-2016-8231
HIGH
Lenovo Service Bridge <4 - Code Injection
CVSS 7.5
CVE-2016-3083
HIGH
Apache Hive < 1.2.2 and 2.0.x < 2.0.1 - Improper Certificate Validation
CVSS 7.5
CVE-2016-4467
MEDIUM
Apache Qpid Proton - Improper Certificate Validation
CVSS 5.9
CVE-2016-7815
MEDIUM
Cybozu Remote Service Manager 3.0.0-3.1.4 - Improper Certificate Validation
CVSS 4.2
CVE-2016-5016
MEDIUM
Pivotal Cloud Foundry < 239 and UAA < 3.4.1 - Improper Certificate Validation
CVSS 5.9
CVE-2016-1519
MEDIUM
Grandstream Wave <1.0.1.26 - Info Disclosure
CVSS 5.9
CVE-2016-1221
MEDIUM
Jetstar App <3.0.0 - Info Disclosure
CVSS 5.9
CVE-2016-1210
MEDIUM
105 BANK app <1.2 - Info Disclosure
CVSS 5.9
CVE-2016-1198
MEDIUM
Photopt for Android <2.0.1 - Info Disclosure
CVSS 5.9
CVE-2016-1186
MEDIUM
Kintone mobile for Android <1.0.6 - Info Disclosure
CVSS 5.9
CVE-2016-4840
MEDIUM
Coordinate Plus < 1.0.2 - Improper Certificate Validation
CVSS 5.9
CVE-2016-4832
MEDIUM
WAON Service Application < 1.4.1 - Improper Certificate Validation
CVSS 5.9
CVE-2016-4830
MEDIUM
Sushiro App for iOS < 2.1.16 and Android < 2.1.16.1 - Improper Certificate Validation
CVSS 5.9
CVE-2016-4829
MEDIUM
DMM Movie Player App < 1.2.1 and < 2.1.3 - Improper Certificate Validation
CVSS 5.9
CVE-2016-1184
MEDIUM
Tokyo Star bank App <1.4 - Info Disclosure
CVSS 5.9
CVE-2016-1148
HIGH
Akerun Smart Lock Robot App <1.2.4 - Info Disclosure
CVSS 8.1
CVE-2016-4818
MEDIUM
DMMFX Trade and DMMFX DEMO Trade < 1.5.0 and GAITAMEJAPAN FX Trade < 1.4.0 - Improper Certificate Validation
CVSS 5.9
CVE-2016-1132
HIGH
Shoplat App <1.18.00 - Info Disclosure
CVSS 7.5
CVE-2016-9319
MEDIUM
Trend Micro Enterprise Mobile Security <9.7.1193 - Info Disclosure
CVSS 5.9
CVE-2016-9892
MEDIUM
ESET Endpoint Antivirus and Endpoint Security for macOS < 6.4.168.0 - Improper Certificate Validation
CVSS 5.9
CVE-2016-7662
HIGH
iPhone OS < 10.2, macOS < 10.12.2, watchOS < 3.1.3 - Certificate Spoofing via Improper Validation
CVSS 7.5
CVE-2016-2402
MEDIUM
OkHttp < 2.7.4 and 3.x < 3.1.2 - Certificate Pinning Bypass via Trusted CA Certificate Chain
CVSS 5.9
CVE-2016-9015
LOW
Python urllib3 <1.19 - Info Disclosure
CVSS 3.7
CVE-2016-7171
MEDIUM
NetApp Plug-in for Symantec NetBackup < 2.0 - Improper Certificate Validation
CVSS 5.6
CVE-2016-1000033
LOW
Shotwell <0.22.0 - SSL Validation Flaw
CVSS 3.7
Details
Vulnerabilities
1,401