Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.0Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and int…Oct 15, 2026
- Medium6.3Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenti…Oct 14, 2026
- Critical9.0Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component.Oct 14, 2026
- Medium6.5Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.EPSS 0.4%Oct 13, 2026
- Medium5.9CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.EPSS 0.3%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.EPSS 0.3%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.EPSS 0.3%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.EPSS 0.3%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.EPSS 0.4%Oct 13, 2026
- Medium5.9CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.EPSS 0.3%Oct 13, 2026
- Medium6.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks.EPSS 0.2%Oct 13, 2026
- High7.4IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM b…EPSS 0.1%Oct 12, 2026
- High7.4FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshake…EPSS 0.2%Oct 12, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.EPSS 0.2%Oct 9, 2026
- High8.1IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.EPSS 0.1%Oct 8, 2026
- High7.6An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.EPSS 0.1%Oct 8, 2026
- Critical9.8Check Point Multiple Products Improper Certificate Validation VulnerabilityKEVEPSS 7.5%Sep 9, 2026
- Medium6.5A flaw was found in JSS (Java Security Services).EPSS 0.2%Aug 24, 2026
- High7.0Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an inter…EPSS 0.4%May 27, 2026
- High8.2A flaw was found in gnutls.EPSS 0.6%May 26, 2026
- High7.1A flaw was found in gnutls.EPSS 0.5%May 26, 2026
- High7.4A flaw was found in gnutls.EPSS 0.5%May 7, 2026
- Medium6.3A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V25…EPSS 0.1%Apr 14, 2026
- Low1.7cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.EPSS 0.2%Mar 31, 2026
- Medium5.3When doing TLS related transfers with reused easy or multi handles and altering the option, libcurl could accidentally reuse a CA store cached in memory for which the…EPSS 0.8%Jan 8, 2026
42 records · page 1 of 2
PreviousNext