Improper Certificate Validation

Every one of the 1,654 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by…CVE-2020-0601Microsoft · CVSS 8.1 · 89% likely

   Microsoft

2. Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2022-26923Microsoft · CVSS 8.8 · 84% likelycovered by CyberSIXT

   Microsoft

3. Improper Certificate Validation in Quantum Security GatewayCVE-2026-85102checkpoint · CVSS 9.8 · 54% likelycovered by CyberSIXT

   Check Point8 articles

4. A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Appl…CVE-2023-41991Apple · CVSS 5.5 · 13% likely

   Apple

5. In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…CVE-2023-20963Android · CVSS 7.8 · 1.5% likely

   Android

6. The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-m…CVE-2015-4000CVSS 3.7 · 100% likely
7. An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials.CVE-2023-27823CVSS 9.8 · 54% likely
8. The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31,…CVE-2018-8034Apache Software Foundation · CVSS 7.5 · 21% likely

   Apache

9. Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificateCVE-2019-15604NodeJS · 20% likely

   Node.js

10. CA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450OpenSSL · 18% likely

    OpenSSL

11. The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 throu…CVE-2002-086216% likely
12. If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expire…CVE-2021-22939NodeJS · 15% likely

    Node.js

13. JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to sp…CVE-2017-5653Apache Software Foundation · 11% likely

    Apache

14. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a si…CVE-2021-44533NodeJS · 9.4% likely

    Node.js

15. Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain na…CVE-2012-57839.3% likely
16. A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denia…CVE-2017-2800wolfSSL · CVSS 8.1 · 8.5% likely

    wolfSSL

17. Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates…CVE-2021-44531NodeJS · 8.4% likely

    Node.js

18. Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which cou…CVE-2020-9488Apache · CVSS 3.7 · 8.2% likely

    Apache

19. Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An asser…CVE-2018-1320Apache Software Foundation · 8.2% likely

    Apache

20. Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka "Microsoft Lync for Mac Certificate Valid…CVE-2017-0129Microsoft Corporation · 7.9% likely

    Microsoft

21. The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and…CVE-2016-12527.2% likely
22. Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows ma…CVE-2015-31527.1% likely
23. The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key excha…CVE-2021-345587.0% likely
24. TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using…CVE-2018-11775Apache Software Foundation · 7.0% likely

    Apache

25. Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhostsCVE-2026-42508golang.org/x/crypto · CVSS 9.1 · 6.9% likely

    Golang.org/x/crypto

26. Sennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted Root CA store of the local system, and publishes the private key in the SennComCCKe…CVE-2018-176126.7% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.