Vulnerability index

Browse CVEs

1,358 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Certificate ValidationCWE-295 × clear
Ios Xe HIGH 7.5
CVE-2017-6664

A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Aut…

Mitigation only
Fix from $1,950 2017-08-07
Malion MEDIUM 5.9
CVE-2017-10819

MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communication.

Fix: after 5.2.1
Fix from $1,600 2017-08-04
Rbb Speed Test MEDIUM 5.9
CVE-2017-2278

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates…

Mitigation only
Fix from $1,600 2017-08-02
Joomla\! HIGH 8.8
CVE-2017-11364

The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control o…

Mitigation only
Fix from $1,950 2017-08-02
Stashcat HIGH 7.5
CVE-2017-11132

An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could iss…

Fix: after 1.5.17
Fix from $1,950 2017-08-01
Restaurant Karaoke MEDIUM 5.9
CVE-2015-0904

The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates, which allows remote attackers to obtain sensitive in…

Mitigation only
Fix from $1,600 2017-07-25
Libinfinity CRITICAL 9.8
CVE-2015-3886

libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors.

Fix: after 0.6.6
Fix from $2,300 2017-07-21
Nixos MEDIUM 5.9
CVE-2017-11501

NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authent…

Fix: after 17.03
Fix from $1,600 2017-07-20
Txaws MEDIUM 5.9
CVE-2017-1000007

txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.

Mitigation only
Fix from $1,600 2017-07-17
Cubeone Firmware HIGH 7.5
CVE-2017-7726

iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.

No fix yet
Fix from $1,950 2017-07-11
Dir 615 CRITICAL 9.8
CVE-2017-7406

The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own …

Fix: after 20.12ptb01
Fix from $2,300 2017-07-07
Magician HIGH 8.8
CVE-2017-3218

Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for softw…

Mitigation only
Fix from $1,950 2017-06-21
Community State Bank Lamar MEDIUM 5.9
CVE-2017-9585

The "Community State Bank - Lamar Mobile Banking" by Community State Bank - Lamar app 3.0.3 -- aka community-state-bank-lamar-mobile-banking/id108392…

Mitigation only
Fix from $1,600 2017-06-16
Fsby Mobile Banking MEDIUM 5.9
CVE-2017-9586

The "FSBY Mobile Banking" by First State Bank of Yoakum TX app 3.0.0 -- aka fsby-mobile-banking/id899136434 for iOS does not verify X.509 certificate…

Mitigation only
Fix from $1,600 2017-06-16
Pcsb Bank Mobile MEDIUM 5.9
CVE-2017-9587

The "PCSB BANK Mobile" by PCSB Bank app 3.0.4 -- aka pcsb-bank-mobile/id1067472090 for iOS does not verify X.509 certificates from SSL servers, which…

Mitigation only
Fix from $1,600 2017-06-16
Oritani Mobile Banking MEDIUM 5.9
CVE-2017-9588

The "Oritani Mobile Banking" by Oritani Bank app 3.0.0 -- aka oritani-mobile-banking/id778851066 for iOS does not verify X.509 certificates from SSL …

Mitigation only
Fix from $1,600 2017-06-16
Scsb Shelbyville Il Mobile Banking MEDIUM 5.9
CVE-2017-9589

The "SCSB Shelbyville IL Mobile Banking" by Shelby County State Bank app 3.0.0 -- aka scsb-shelbyville-il-mobile-banking/id938960224 for iOS does not…

Mitigation only
Fix from $1,600 2017-06-16
State Bank Of Waterloo Mobile Banking MEDIUM 5.9
CVE-2017-9590

The "State Bank of Waterloo Mobile Banking" by State Bank of Waterloo app 3.0.2 -- aka state-bank-of-waterloo-mobile-banking/id555321714 for iOS does…

Mitigation only
Fix from $1,600 2017-06-16
Pcb Mobile MEDIUM 5.9
CVE-2017-9591

The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers, which all…

Mitigation only
Fix from $1,600 2017-06-16
Your Legacy Federal Credit Union Mobile Banking MEDIUM 5.9
CVE-2017-9592

The "Your Legacy Federal Credit Union Mobile Banking" by Your Legacy Federal Credit Union app 3.0.1 -- aka your-legacy-federal-credit-union-mobile-ba…

Mitigation only
Fix from $1,600 2017-06-16
Oculina Mobile Banking MEDIUM 5.9
CVE-2017-9593

The "Oculina Mobile Banking" by Oculina Bank app 3.0.0 -- aka oculina-mobile-banking/id867025690 for iOS does not verify X.509 certificates from SSL …

Mitigation only
Fix from $1,600 2017-06-16
Svb Mobile MEDIUM 5.9
CVE-2017-9594

The "SVB Mobile" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL serve…

Mitigation only
Fix from $1,600 2017-06-16
First State Bank Of Bigfork Mobile Banking MEDIUM 5.9
CVE-2017-9595

The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id1133969…

Mitigation only
Fix from $1,600 2017-06-16
Cfb Mobile Banking MEDIUM 5.9
CVE-2017-9596

The "CFB Mobile Banking" by Citizens First Bank Wisconsin app 3.0.1 -- aka cfb-mobile-banking/id1081102805 for iOS does not verify X.509 certificates…

Mitigation only
Fix from $1,600 2017-06-16
Blue Ridge Bank And Trust Co. Mobile Banking MEDIUM 5.9
CVE-2017-9597

The "Blue Ridge Bank and Trust Co. Mobile Banking" by Blue Ridge Bank and Trust Co. app 3.0.1 -- aka blue-ridge-bank-and-trust-co-mobile-banking/id69…

Mitigation only
Fix from $1,600 2017-06-16
Morton Credit Union Mobile Banking MEDIUM 5.9
CVE-2017-9598

The "Morton Credit Union Mobile Banking" by Morton Credit Union app 3.0.1 -- aka morton-credit-union-mobile-banking/id1119623070 for iOS does not ver…

Mitigation only
Fix from $1,600 2017-06-16
Fountain Trust Mobile Banking MEDIUM 5.9
CVE-2017-9599

The "Fountain Trust Mobile Banking" by FOUNTAIN TRUST COMPANY app before 3.2.0 -- aka fountain-trust-mobile-banking/id891343006 for iOS does not veri…

Mitigation only
Fix from $1,600 2017-06-16
Peoples Bank Tulsa MEDIUM 5.9
CVE-2017-9600

The "Peoples Bank Tulsa" by Peoples Bank - OK app 3.0.2 -- aka peoples-bank-tulsa/id1074279285 for iOS does not verify X.509 certificates from SSL se…

Mitigation only
Fix from $1,600 2017-06-16
Fnb Kemp Mobile Banking MEDIUM 5.9
CVE-2017-9601

The "FNB Kemp Mobile Banking" by First National Bank of Kemp app 3.0.2 -- aka fnb-kemp-mobile-banking/id571448725 for iOS does not verify X.509 certi…

Mitigation only
Fix from $1,600 2017-06-16
Wawa Employees Credit Union Mobile MEDIUM 5.9
CVE-2017-9558

The wawa-employees-credit-union-mobile/id1158082793 app 4.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-mi…

Mitigation only
Fix from $1,600 2017-06-16