CWE-295 · Improper Certificate Validation (page 4)
Page 4 of 15 — CVEs classified under CWE-295, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-9785 | | 2025-09-03 | PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is de… | |
CVE-2025-33099 | Medium | 5.9 | 2025-09-01 | IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certi… |
CVE-2025-30278 | High | 8.8 | 2025-08-29 | An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit th… |
CVE-2025-30277 | High | 8.8 | 2025-08-29 | An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit th… |
CVE-2025-58127 | Medium | 4.8 | 2025-08-28 | Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic. |
CVE-2025-58126 | Medium | 4.8 | 2025-08-28 | Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic. |
CVE-2025-58125 | Medium | 4.8 | 2025-08-28 | Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic. |
CVE-2025-58124 | Medium | 4.8 | 2025-08-28 | Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic. |
CVE-2025-58123 | Medium | 4.8 | 2025-08-28 | Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic. |
CVE-2025-7390 | Critical | 9.1 | 2025-08-21 | A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communicati… |
CVE-2025-33142 | Medium | 5.3 | 2025-08-14 | IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections. |
CVE-2025-0309 | | 2025-08-14 | An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient valida… | |
CVE-2025-2183 | | 2025-08-13 | An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary serve… | |
CVE-2025-54809 | High | 7.4 | 2025-08-13 | F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End o… |
CVE-2025-8393 | High | 7.3 | 2025-08-08 | A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishi… |
CVE-2025-20215 | Medium | 5.4 | 2025-08-06 | A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network-proximate attacker to complete a meeti… |
CVE-2025-48393 | Medium | 5.7 | 2025-08-06 | The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Ma… |
CVE-2025-2028 | Medium | 6.5 | 2025-08-06 | Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs |
CVE-2025-54607 | High | 7.7 | 2025-08-06 | Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-44964 | Low | 3.9 | 2025-08-05 | A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information. |
CVE-2025-8476 | High | 8.0 | 2025-08-01 | Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected… |
CVE-2025-6037 | Medium | 6.8 | 2025-08-01 | Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as [+… |
CVE-2025-36005 | Medium | 5.9 | 2025-07-24 | IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0… |
CVE-2025-7395 | | 2025-07-18 | A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL… | |
CVE-2025-30024 | Medium | 6.8 | 2025-07-11 | The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack. |
CVE-2025-46788 | High | 7.4 | 2025-07-10 | Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via netwo… |
CVE-2025-32989 | Medium | 5.3 | 2025-07-10 | A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension durin… |
CVE-2025-35983 | Medium | 6.5 | 2025-07-10 | Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged attacker to perform a limited denial of ser… |
CVE-2025-48802 | Medium | 6.5 | 2025-07-08 | Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network. |
CVE-2024-31854 | High | 8.1 | 2025-07-08 | A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed devi… |
CVE-2024-31853 | High | 8.1 | 2025-07-08 | A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed devi… |
CVE-2025-7095 | Low | 3.7 | 2025-07-06 | A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Han… |
CVE-2025-34066 | | 2025-07-01 | An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like… | |
CVE-2025-29331 | Critical | 9.8 | 2025-06-26 | An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check cert… |
CVE-2025-6032 | High | 8.3 | 2025-06-24 | A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue… |
CVE-2025-6433 | Critical | 9.8 | 2025-06-24 | If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would… |
CVE-2025-39205 | Medium | 6.5 | 2025-06-24 | A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack d… |
CVE-2025-52919 | Medium | 4.3 | 2025-06-21 | In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potentially allowing invalid certificates to… |
CVE-2025-32878 | Critical | 9.8 | 2025-06-20 | An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. This function is mainly for download… |
CVE-2025-36041 | Medium | 4.7 | 2025-06-15 | IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC… |
CVE-2025-24471 | Medium | 6.5 | 2025-06-10 | An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to… |
CVE-2025-33031 | High | 8.8 | 2025-06-06 | An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit t… |
CVE-2025-30279 | High | 8.8 | 2025-06-06 | An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit… |
CVE-2025-29885 | High | 8.8 | 2025-06-06 | An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who h… |
CVE-2025-29884 | High | 8.8 | 2025-06-06 | An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who h… |
CVE-2025-29883 | High | 8.8 | 2025-06-06 | An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who h… |
CVE-2025-22486 | High | 8.8 | 2025-06-06 | An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who h… |
CVE-2025-5025 | Medium | 4.8 | 2025-05-28 | libcurl supports *pinning* of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC… |
CVE-2025-4947 | Medium | 6.5 | 2025-05-28 | libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it doe… |
CVE-2025-5279 | | 2025-05-27 | When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate validation… | |
CVE-2024-13956 | Medium | 6.7 | 2025-05-22 | SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS… |
CVE-2025-4575 | Medium | 6.5 | 2025-05-22 | Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a… |
CVE-2024-45641 | Medium | 6.5 | 2025-05-20 | IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate validation. |
CVE-2023-33861 | Medium | 6.5 | 2025-05-20 | IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client. |
CVE-2025-32407 | Medium | 5.9 | 2025-05-16 | Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attack… |
CVE-2025-3463 | | 2025-05-09 | "This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS Dr… | |
CVE-2025-20157 | Medium | 5.9 | 2025-05-07 | A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote at… |
CVE-2025-46551 | Low | 3.7 | 2025-05-07 | JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (c… |
CVE-2024-47619 | High | 7.5 | 2025-05-07 | syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It… |
CVE-2025-3218 | Medium | 5.4 | 2025-05-07 | IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malic… |
CVE-2025-37730 | Medium | 6.5 | 2025-05-06 | Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in TCP outp… |
CVE-2025-20670 | Medium | 5.7 | 2025-05-05 | In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected… |
CVE-2025-27820 | High | 7.5 | 2025-04-24 | A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apac… |
CVE-2025-28169 | High | 8.1 | 2025-04-23 | BYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was discovered to cend broadcasts to the manufacturer's cloud server unencrypted… |
CVE-2025-26478 | Low | 3.1 | 2025-04-17 | Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could pot… |
CVE-2024-42193 | High | 8.1 | 2025-04-15 | HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibi… |
CVE-2025-22459 | Medium | 4.8 | 2025-04-08 | Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to inter… |
CVE-2025-30000 | Medium | 6.7 | 2025-04-08 | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application does not properly restrict permissions of t… |
CVE-2021-25635 | Medium | 5.5 | 2025-03-21 | An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, t… |
CVE-2025-0254 | Medium | 5.9 | 2025-03-20 | HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226. An attacker could intercept… |
CVE-2024-10445 | Medium | 4.3 | 2025-03-19 | Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DS… |
CVE-2024-10444 | High | 7.5 | 2025-03-19 | Improper certificate validation vulnerability in the LDAP utilities in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3… |
CVE-2023-48785 | Medium | 4.8 | 2025-03-14 | An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a M… |
CVE-2024-40590 | Medium | 4.8 | 2025-03-14 | An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and b… |
CVE-2024-43107 | High | 7.2 | 2025-03-10 | Improper Certificate Validation (CWE-295) in the Gallagher Milestone Integration Plugin (MIP) permits unauthenticated messages (e.g. alarm events) to be sent t… |
CVE-2024-41724 | High | 8.7 | 2025-03-10 | Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server. This issue affe… |
CVE-2024-50394 | High | 8.8 | 2025-03-07 | An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromi… |
CVE-2025-23118 | Medium | 6.4 | 2025-03-01 | An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make uns… |
CVE-2024-41334 | High | 8.8 | 2025-02-27 | Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor… |
CVE-2024-55581 | High | 7.4 | 2025-02-26 | When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of ve… |
CVE-2024-50691 | High | 7.4 | 2025-02-26 | SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is… |
CVE-2025-1001 | Medium | 5.7 | 2025-02-21 | Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to a… |
CVE-2024-49782 | Medium | 6.8 | 2025-02-20 | IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit th… |
CVE-2024-29171 | Medium | 5.9 | 2025-02-12 | Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker could pote… |
CVE-2025-1002 | Medium | 5.7 | 2025-02-10 | MicroDicom DICOM Viewer version 2024.03 fails to adequately verify the update server's certificate, which could make it possible for attackers in a privileged… |
CVE-2025-1193 | High | 8.1 | 2025-02-10 | Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker t… |
CVE-2024-11621 | High | 8.8 | 2025-02-10 | Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communi… |
CVE-2024-47258 | High | 8.1 | 2025-02-06 | 2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. … |
CVE-2025-23114 | Critical | 9.0 | 2025-02-05 | A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a fail… |
CVE-2025-1014 | High | 8.8 | 2025-02-04 | Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Fir… |
CVE-2025-23091 | Medium | 5.9 | 2025-02-01 | An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM… |
CVE-2024-23970 | Medium | 6.5 | 2025-01-31 | This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of ChargePoint Home Flex charging stations. Aut… |
CVE-2024-23928 | Medium | 6.5 | 2025-01-31 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of Pioneer DMH-WT7600NEX d… |
CVE-2023-38009 | Medium | 4.2 | 2025-01-26 | IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to the lack of certificate pinning. |
CVE-2024-52330 | High | 7.4 | 2025-01-23 | ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmwa… |
CVE-2024-52329 | High | 7.4 | 2025-01-23 | ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and o… |
CVE-2024-42186 | Low | 2.8 | 2025-01-23 | BigFix Patch Download Plug-ins are affected by an insecure protocol support. The application can allow improper handling of SSL certificates validation. |
CVE-2024-48460 | Medium | 4.3 | 2025-01-16 | An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the… |
CVE-2025-0501 | High | 7.5 | 2025-01-15 | An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle. |
CVE-2025-0500 | High | 7.5 | 2025-01-15 | An issue in the native clients for Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to… |