Missing Validation of OpenSSL Certificate

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Argo CD's certificate verification is skipped for connections to OIDC providersCVE-2022-31105argoproj · CVSS 8.3 · 0.8% likely

   Argoproj

2. An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go fileCVE-2024-40464Beego · CVSS 8.8 · 0.6% likely

   Beego

3. Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.CVE-2023-48052Httpie · CVSS 7.4 · 0.3% likely
4. A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequest function.CVE-2024-41265CVSS 7.5 · 0.3% likely
5. OpenList Insecure TLS Default ConfigurationCVE-2026-25060OpenListTeam · CVSS 8.1 · 0.3% likely

   OpenListTeam

6. Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.CVE-2025-56230Tencent · CVSS 7.5 · 0.2% likely

   Tencent

7. Server Certificate Verification DisabledCVE-2025-12553Azure Access Technology · CVSS 10 · 0.2% likely

   Azure Access Technology

8. Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation. The application fails to properly validate the TLS certificate from its update…CVE-2025-63432Xtooltech · CVSS 4.6 · 0.2% likely
9. Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.CVE-2025-56146CVSS 5.3 · 0.2% likely
10. Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk modelsCVE-2026-62657NETGEAR · CVSS 4.9 · 0.1% likely

    NETGEAR

11. GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle (MitM) attack to in…CVE-2025-56232Cdprojekt · CVSS 6.8 · 0.1% likely
12. D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmwa…CVE-2024-36755Dlink · CVSS 6.8 · 0.1% likely

    D-Link

13. goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component.CVE-2024-41253CVSS 7.1 · 0.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.