Search Vulnerabilities

Apache Ranger: Hostname verification bypass in NiFiRegistryClient and NifiClient

Xiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITM

Apache Uniffle: Insecure SSL Configuration in Uniffle HTTP Client

Apache Log4j Core: Missing TLS hostname verification in Socket appender

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7

Host Header Injection in Akinsoft's QR Menu

Host Header Injection in HotelRunner's B2B

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7

Org.keycloak.protocol.services: keycloak hostname verification

In JetBrains Toolbox App before 2

The mobile application (com

IBM OpenPages improper certificate validation

IBM Storage Defender improper certificate validation

Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation

Kroxylicious: missing upstream kafka tls hostname verification

Allow attackers to intercept or falsify data exchanges between the client and the server

ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass

Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx

An improper certificate validation vulnerability [CWE-295] in FortiManager 7

Improper Validation of Certificate Vulnerability in Hitachi Device Manager