CWE-295
1,689 CVEs • Abstraction: Base
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
CVEs (1,689)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communication. |
The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof se...Show more |
The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs. |
An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certificate for the backend and the application would not notice i...Show more |
The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates, which allows remote attackers to obtain sensitive information via a man-in-the-middle attack. |
1Libinfinity Project 1Libinfinity May 13, 2026 Jul 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors. |
NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS...Show more |
txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure. |
iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. |
The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL Certificate. An attacker can simply monitor network traffic to stea...Show more |
Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates. |
1Fnbkemp 1Fnb Kemp Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "FNB Kemp Mobile Banking" by First National Bank of Kemp app 3.0.2 -- aka fnb-kemp-mobile-banking/id571448725 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to s...Show more |
1Meafinancial 1Peoples Bank Tulsa May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Peoples Bank Tulsa" by Peoples Bank - OK app 3.0.2 -- aka peoples-bank-tulsa/id1074279285 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and ob...Show more |
1Fountaintrust 1Fountain Trust Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Fountain Trust Mobile Banking" by FOUNTAIN TRUST COMPANY app before 3.2.0 -- aka fountain-trust-mobile-banking/id891343006 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle...Show more |
1Meafinancial 1Morton Credit Union Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Morton Credit Union Mobile Banking" by Morton Credit Union app 3.0.1 -- aka morton-credit-union-mobile-banking/id1119623070 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle...Show more |
1Meafinancial 1Blue Ridge Bank And Trust Co. Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Blue Ridge Bank and Trust Co. Mobile Banking" by Blue Ridge Bank and Trust Co. app 3.0.1 -- aka blue-ridge-bank-and-trust-co-mobile-banking/id699679197 for iOS does not verify X.509 certificates from SSL servers, wh...Show more |
1Meafinancial 1Cfb Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "CFB Mobile Banking" by Citizens First Bank Wisconsin app 3.0.1 -- aka cfb-mobile-banking/id1081102805 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof se...Show more |
1Fsbbigfork 1First State Bank Of Bigfork Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id1133969876 for iOS does not verify X.509 certificates from SSL servers, which...Show more |
The "SVB Mobile" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtai...Show more |
1Meafinancial 1Oculina Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The "Oculina Mobile Banking" by Oculina Bank app 3.0.0 -- aka oculina-mobile-banking/id867025690 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and...Show more |