The product does not validate, or incorrectly validates, a certificate.
1,402 vulnerabilities with CWE-295
CVE-2015-7826
CRITICAL
botan < 1.11.22 - Improper Certificate Validation via Wildcard Hostname Matching
CVSS 9.8
CVE-2015-4680
HIGH
FreeRADIUS 2.2.x < 2.2.8 and 3.0.x < 3.0.9 - Improper Certificate Validation
CVSS 7.5
CVE-2015-2330
HIGH
webkitgtk < 2.6.5 - Improper Certificate Validation
CVSS 7.5
CVE-2015-8960
HIGH
Ietf Transport Layer Security < 1.2 - Improper Certificate Validation
CVSS 8.1
CVE-2015-3152
MEDIUM
Oracle MySQL <5.7.3 & MariaDB <5.5.44 - Info Disclosure
CVSS 5.9
CVE-2015-0534
HIGH
RSA BSAFE Suite Certificate Blacklist Bypass via Unsigned Certificate Data
CVSS 7.5
CVE-2015-4094
Thycotic Secret Server < 2.3 - Improper Certificate Validation
CVE-2015-4000
LOW
OpenSSL 1.0.1-1.0.1l - Man-in-the-Middle Cipher Downgrade via DHE_EXPORT
CVSS 3.7
CVE-2014-8164
CRITICAL
Red Hat CloudForms 5.x - Certificate Validation Bypass via Insecure OpenSSL Verify Mode
CVSS 9.1
CVE-2014-3230
MEDIUM
LWP::Protocol::https 6.04-6.06 - Improper Certificate Validation via Environment Variable Manipulation
CVSS 5.9
CVE-2014-0161
MEDIUM
ovirt-engine-sdk-python <3.4.0.7, 3.5.0.4 - Info Disclosure
CVSS 5.9
CVE-2014-0104
MEDIUM
Fence-agents <4.0.17 - Man-in-the-Middle
CVSS 5.9
CVE-2014-3495
HIGH
duplicity 0.6.24 - Improper Certificate Validation
CVSS 7.5
CVE-2014-2902
HIGH
wolfssl < 3.2.0 - Improper Certificate Validation
CVSS 7.5
CVE-2014-2901
HIGH
wolfssl < 3.2.0 - Improper Certificate Validation
CVSS 7.5
CVE-2014-8167
MEDIUM
Red Hat Enterprise Virtualization - Improper Certificate Validation
CVSS 5.9
CVE-2014-7143
HIGH
Python Twisted 14.0 - Info Disclosure
CVSS 7.5
CVE-2014-3607
MEDIUM
ldaptive < 1.0.5 and vt-ldap < 3.3.8 - Improper Certificate Validation in DefaultHostnameVerifier
CVSS 5.9
CVE-2014-3250
MEDIUM
Puppet < 3.6.2 - Improper Certificate Validation
CVSS 6.5
CVE-2014-2845
MEDIUM
Cyberduck < 4.4.4 - Improper Certificate Validation
CVSS 5.9
CVE-2014-7242
MEDIUM
SumaHo <3.0.0, <1.2.2 - Info Disclosure
CVSS 5.9
CVE-2014-3706
MEDIUM
Red Hat Enterprise MRG 3 - Improper Certificate Validation in vdsm X.509 Certificates
CVSS 5.9
CVE-2014-3451
HIGH
OpenFire < 3.9.3 - Improper Certificate Validation
CVSS 7.5
CVE-2014-3394
Cisco Adaptive Security Appliance Software - Improper Certificate Validation in Smart Call Home
CVE-2014-0363
Ignite Realtime Smack XMPP API <4.0.0-rc1 - Info Disclosure
Details
Vulnerabilities
1,402