CWE-295

1,395 vulnerabilities with CWE-295

CVE-2025-44018 HIGH

GL-Inet GL-AXT1800 4.7.0 - Firmware Downgrade

CVSS 8.3

CVE-2025-65083 LOW

GoSign Desktop <2.4.1 - Info Disclosure

CVSS 3.2

CVE-2025-60022 MEDIUM

デジラアプリ iOS < 80.10.00 - Man-in-the-Middle Information Disclosure

CVSS 4.8

CVE-2025-30669 MEDIUM

Zoom Meeting Software Development Kit < 6.5.10 - Improper Certificate Validation

CVSS 4.8

CVE-2025-12765 HIGH

pgAdmin <= 9.9 - Improper Certificate Validation in LDAP Authentication

CVSS 7.5

CVE-2025-12047 MEDIUM

Lenovo Scanner pro - Info Disclosure

CVSS 5.3

CVE-2025-10495 HIGH

Lenovo App Store, PC Manager, Browser, and Legion Zone - Remote Code Execution via Improper Certificate Validation

CVSS 7.5

CVE-2025-40744 HIGH

Solid Edge SE2025 <V225.0 Update 11 - Man in the Middle

CVSS 7.5

CVE-2025-12943 HIGH

NETGEAR RAX30/RAXE300 - Command Injection

CVSS 7.5

CVE-2025-64685 HIGH

JetBrains YouTrack < 2025.3.104432 - Improper TLS Certificate Validation

CVSS 8.1

CVE-2025-64432 MEDIUM

KubeVirt < 1.5.3 and 1.6.0 - Improper Certificate Validation in mTLS Authentication

CVSS 4.7

CVE-2025-56231 CRITICAL

Tonec Internet Download Manager < 6.42.41.1 - Missing SSL Certificate Validation

CVSS 9.1

CVE-2025-54470 HIGH

NeuVector 5.3.0-5.3.4, 5.4.0-5.4.6 - Certificate Validation Bypass and DoS via Telemetry

CVSS 8.6

CVE-2025-58188 HIGH

GO < 1.24.8 - Improper Certificate Validation

CVSS 7.5

CVE-2025-62375 MEDIUM

go-witness < 0.9.1 - Improper Certificate Validation in AWS Attestor

CVE-2025-11619 HIGH

Devolutions Server < 2025.2.15.0 - Improper Certificate Validation

CVSS 8.8

CVE-2025-62371 HIGH

OpenSearch Data Prepper < 2.12.2 - Improper Certificate Validation in OpenSearch Sink and Source Plugins

CVSS 7.4

CVE-2025-6026 LOW

Lenovo Universal Device Client < 25.7.0.21 - Improper Certificate Validation

CVSS 3.1

CVE-2025-10699 MEDIUM

Lenovo LeCloud Client < 2.501.25.0 - Information Disclosure via Improper Certificate Validation

CVSS 5.3

CVE-2025-11695 HIGH

MongoDB Rust Driver < 3.2.5 - Improper Certificate Validation

CVSS 8.0

CVE-2025-11633 LOW

Furbo 360 Dog Camera <036 & Furbo Mini <074 - Improper Certificate Validation

CVSS 3.7

CVE-2025-61778 CRITICAL

Akka.Remote 1.2.0-1.5.51 - Authentication Bypass via Missing Mutual TLS Enforcement

CVE-2025-34235 HIGH

Vasion Print Virtual Appliance < 25.1.102 & Application < 25.1.1413 - Remote Code Execution via Weak SSL/TLS Validation

CVSS 7.8

CVE-2025-10548 MEDIUM

CleverControl employee monitoring software 11.5.1041.6 - Remote Code Execution via TLS Certificate Validation Bypass

CVSS 6.5

CVE-2025-34199 HIGH

Vasion Print Virtual Appliance <20.0.2786 & Host <22.0.1049 TLS/SSL Certificate Validation Flaw

CVSS 8.1