Search Vulnerabilities

epa4all Security Incident: Implement keystore based on Telematik TSL, implement hostname check and certificate check for lib-vau

TLS Certificate Verification Disabled on CXF Transport Clients in epa4all

Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Apache MINA SSHD: SSH certificate options lack validations

lettre has TLS hostname verification disabled when using Boring TLS backend

Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle...

Windows Cryptographic Services Security Feature Bypass Vulnerability

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS ...

Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability

Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app

cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends

Prisma Access Agent: Improper Certificate Validation on iOS

etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

Improper Certificate Validation

Connection possible to the Administration portal with a revoked certificate

Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool