CWE-295
1,445 CVEs • Abstraction: Base
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
CVEs (1,445)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates, which allows remote attackers to obtain sensitive information via a man-in-the-middle attack. |
1Libinfinity Project 1Libinfinity May 13, 2026 Jul 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors. |
NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS...Show more |
txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure. |
iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. |
The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL Certificate. An attacker can simply monitor network traffic to stea...Show more |
Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates. |
1Fnbkemp 1Fnb Kemp Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "FNB Kemp Mobile Banking" by First National Bank of Kemp app 3.0.2 -- aka fnb-kemp-mobile-banking/id571448725 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to s...Show more |
1Meafinancial 1Peoples Bank Tulsa May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Peoples Bank Tulsa" by Peoples Bank - OK app 3.0.2 -- aka peoples-bank-tulsa/id1074279285 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and ob...Show more |
1Fountaintrust 1Fountain Trust Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Fountain Trust Mobile Banking" by FOUNTAIN TRUST COMPANY app before 3.2.0 -- aka fountain-trust-mobile-banking/id891343006 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle...Show more |
1Meafinancial 1Morton Credit Union Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Morton Credit Union Mobile Banking" by Morton Credit Union app 3.0.1 -- aka morton-credit-union-mobile-banking/id1119623070 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle...Show more |
1Meafinancial 1Blue Ridge Bank And Trust Co. Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Blue Ridge Bank and Trust Co. Mobile Banking" by Blue Ridge Bank and Trust Co. app 3.0.1 -- aka blue-ridge-bank-and-trust-co-mobile-banking/id699679197 for iOS does not verify X.509 certificates from SSL servers, wh...Show more |
1Meafinancial 1Cfb Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "CFB Mobile Banking" by Citizens First Bank Wisconsin app 3.0.1 -- aka cfb-mobile-banking/id1081102805 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof se...Show more |
1Fsbbigfork 1First State Bank Of Bigfork Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id1133969876 for iOS does not verify X.509 certificates from SSL servers, which...Show more |
The "SVB Mobile" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtai...Show more |
1Meafinancial 1Oculina Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Oculina Mobile Banking" by Oculina Bank app 3.0.0 -- aka oculina-mobile-banking/id867025690 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and...Show more |
1Meafinancial 1Your Legacy Federal Credit Union Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Your Legacy Federal Credit Union Mobile Banking" by Your Legacy Federal Credit Union app 3.0.1 -- aka your-legacy-federal-credit-union-mobile-banking/id919131389 for iOS does not verify X.509 certificates from SSL s...Show more |
The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i...Show more |
1Sbw 1State Bank Of Waterloo Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "State Bank of Waterloo Mobile Banking" by State Bank of Waterloo app 3.0.2 -- aka state-bank-of-waterloo-mobile-banking/id555321714 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-th...Show more |
1Meafinancial 1Scsb Shelbyville Il Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "SCSB Shelbyville IL Mobile Banking" by Shelby County State Bank app 3.0.0 -- aka scsb-shelbyville-il-mobile-banking/id938960224 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-mi...Show more |