Improper Validation of Certificate with Host Mismatch

Every one of the 101 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field…CVE-2014-3522Apache · 5.6% likely

   Apache

2. A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to th…CVE-2018-10936Postgresql · CVSS 8.1 · 2.9% likely

   Postgresql

3. SMTPS server hostname not checked when making TLS connection to SMTPS serverCVE-2021-44549Apache Software Foundation · 2.1% likely

   Apache

4. Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root c…CVE-2020-1887Facebook · 1.6% likely

   Meta (Facebook)

5. TLS certificate check bypass with mbedTLSCVE-2024-2466curl · CVSS 6.5 · 1.5% likely

   The Curl Project3 bounty reports

6. A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit th…CVE-2020-14387Samba · 1.1% likely

   Samba

7. Existing TLS connections can be reused without checking remote hostnameCVE-2020-15260pjsip · CVSS 6.8 · 1.0% likely

   Pjsip

8. Splunk Enterprise lacked TLS host name validationCVE-2022-32153Splunk, Inc · CVSS 8.1 · 0.9% likely

   Splunk

9. A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an att…CVE-2020-1758Red Hat · CVSS 5.3 · 0.9% likely

   Red Hat

10. The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostna…CVE-2014-3603Shibboleth; OpenSAML Java · 0.8% likely
11. Improper Validation of Certificate with Host Mismatch in Java-WebSocketCVE-2020-11050TooTallNate · CVSS 9 · 0.8% likely
12. An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19.…CVE-2024-34447CVSS 7.5 · 0.8% likely
13. Apache Log4j Core: Missing TLS hostname verification in Socket appenderCVE-2025-68161Apache Software Foundation · CVSS 6.3 · 0.8% likely

    Apache

14. redirect to SFTP or SCP bypasses host verificationCVE-2026-86410curl · CVSS 8.1 · 0.8% likely

    The Curl Project2 bounty reports

15. Disabled hostname verification and accepting self-signed certificatesCVE-2021-21385openMF · CVSS 8.8 · 0.7% likely
16. An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rcli…CVE-2017-2911Circle Media · CVSS 9 · 0.7% likely

    Circle Media

17. PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D20, 13.3 before 13.3R10, 14.1 bef…CVE-2016-1280Juniper · 0.7% likely

    Juniper Networks

18. An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the gocl…CVE-2017-2912Circle Media · CVSS 7.4 · 0.7% likely

    Circle Media

19. An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The me…CVE-2025-46408Avtech · CVSS 9.8 · 0.7% likely

    Avtech

20. Apache Thrift: TSSLTransportFactory.java hostname verificationCVE-2026-43869Apache Software Foundation · CVSS 7.3 · 0.6% likely

    Apache

21. Apache Ranger: Clients accept TLS certificates issued for other hostnamesCVE-2026-65942Apache Software Foundation · CVSS 7.5 · 0.6% likely

    Apache

22. Apache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypassCVE-2026-34477Apache Software Foundation · CVSS 6.3 · 0.6% likely

    Apache

23. Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.CVE-2021-33695SAP SE · CVSS 6.8 · 0.6% likely

    SAP

24. libssh global known_hosts overrideCVE-2025-15079curl · CVSS 5.3 · 0.5% likely

    The Curl Project1 bounty report

25. SSLContext.wrap_bio() missing validation of server_hostname parameterCVE-2026-19553Python Software Foundation · CVSS 7.6 · 0.5% likelycovered by CyberSIXT

    Python1 article

26. Apache Ranger: Hostname verification bypass in NiFiRegistryClientCVE-2025-59060Apache Software Foundation · CVSS 5.3 · 0.5% likely

    Apache

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.