Vulnerabilities > Improper Certificate Validation

DATE CVE VULNERABILITY TITLE RISK
2023-10-17 CVE-2022-43892 Improper Certificate Validation vulnerability in IBM Security Verify Privilege On-Premises
IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could disclose sensitive information which could aid further attacks against the system.
network
low complexity
ibm CWE-295
5.3
2023-10-17 CVE-2022-22380 Improper Certificate Validation vulnerability in IBM Security Verify Privilege On-Premises
IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates.
network
low complexity
ibm CWE-295
4.3
2023-10-16 CVE-2023-5422 Improper Certificate Validation vulnerability in Otrs
The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication.
network
low complexity
otrs CWE-295
critical
9.1
2023-10-13 CVE-2023-4499 Improper Certificate Validation vulnerability in HP Thinupdate
A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure.
network
low complexity
hp CWE-295
7.5
2023-10-12 CVE-2023-5554 Improper Certificate Validation vulnerability in Linecorp Line
Lack of TLS certificate verification in log transmission of a financial module within LINE Client for iOS prior to 13.16.0.
network
low complexity
linecorp CWE-295
critical
9.8
2023-10-04 CVE-2023-2422 Improper Certificate Validation vulnerability in Redhat products
A flaw was found in Keycloak.
network
low complexity
redhat CWE-295
7.1
2023-10-04 CVE-2023-4586 Improper Certificate Validation vulnerability in multiple products
A vulnerability was found in the Hot Rod client.
network
high complexity
redhat infinispan CWE-295
7.4
2023-09-21 CVE-2023-41991 Improper Certificate Validation vulnerability in Apple Iphone OS and Macos
A certificate validation issue was addressed.
local
low complexity
apple CWE-295
5.5
2023-09-19 CVE-2023-38351 Improper Certificate Validation vulnerability in Minitool Partition Wizard 12.8
MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers to achieve remote code execution through a man in the middle attack.
network
high complexity
minitool CWE-295
8.1
2023-09-19 CVE-2023-38352 Improper Certificate Validation vulnerability in Minitool Partition Wizard 12.8
MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to achieve remote code execution through a man in the middle attack.
network
high complexity
minitool CWE-295
8.1