地图 / 证书校验不当

证书校验不当

Improper Certificate Validation · 密码学缺陷

密码学缺陷 / 证书校验不当

69公开报告

—CWE 编号

0已标注发现方式

69关联报告

发现方式分布

暂无发现方式标注。

关联报告

[3DS][SSL] Improper certificate validation allows an attacker to perform MitM attacksNintendo · 2020-12-18 · 低危 · 129 票 SameSite restrictions are lifted, and SameSite:Strict cookie are being sent.Brave Software · 2025-10-15 · 中危 · 73 票 CVE-2025-5025: No QUIC certificate pinning with wolfSSLcurl · 2025-05-28 · 低危 · 54 票 CVE-2020-8286: Inferior OCSP verificationcurl · 2020-12-09 · 低危 · 51 票 CVE-2024-2466: TLS certificate check bypass with mbedTLS (reward request)Internet Bug Bounty · 2024-03-29 · 低危 · $2,580 · 48 票 CVE-2025-10966: missing SFTP host verification with wolfSSHcurl · 2025-11-05 · 低危 · 43 票 CVE-2024-2379: QUIC certificate check bypass with wolfSSLInternet Bug Bounty · 2024-03-29 · 低危 · $560 · 37 票 CVE-2024-8096: OCSP stapling bypass with GnuTLScurl · 2024-09-11 · 低危 · 36 票 Acronis True Image (Windows) does not validate server certificate on a TLS connectionAcronis · 2021-08-05 · 中危 · $500 · 34 票 CVE-2026-7009: OCSP stapling bypass with Apple SecTrustcurl · 2026-04-29 · 低危 · 33 票 Apple SecTrust legacy path accepts untrusted certificates on pre-10.14 macOS/iOS when built with USE_APPLE_SECTRUSTcurl · 2025-10-09 · 中危 · 30 票 TLS certificate hostname bypass when the IP is written fullwidth digitsNode.js · 2026-10-23 · 中危 · 29 票 X-E2EE-SIGNATURE verification can be bypassed, leading to loss of confidentiality of end-to-end encrypted filesNextcloud · 2024-12-15 · 低危 · 27 票 TLS certificate hostname bypass when the host loosely resolves to an IP addressNode.js · 2026-10-23 · 中危 · 24 票 curl GnuTLS backend accepts a clientAuth-only certificate for HTTPS server authenticationcurl · 2026-05-25 · 低危 · 24 票 Disk-o Cloud application (Windows) does not validate server certificate on a TLS connectionMail.ru · — · 未评级 · $2,500 · 24 票 GnuTLS OCSP stapling accepts unrelated SingleResponse (no cert-ID binding)curl · 2026-06-05 · 中危 · 23 票 Built-in TLS module unexpectedly treats "rejectUnauthorized: undefined" as "rejectUnauthorized: false", disabling all certificate validationNode.js · 2021-09-10 · 低危 · $150 · 20 票 Insecure HostnameVerifier within WebView of Razer Pay Android (TLS Vulnerability)Razer · — · 未评级 · $750 · 20 票 Sandbox User Can Inject Rogue CA Certificate into OS Trust Store via Sudo-Allowed deploy-certificates.shAWS VDP · 2026-07-28 · 低危 · 18 票 Acronis True Image 2021 (windows) does not validate server hostname on a login TLS connectionAcronis · 2021-08-10 · 中危 · $250 · 18 票 SSL session-cache peer key omits signature_algorithms: strict-sigalg handle silently resumes a permissive sibling's sessioncurl · 2026-05-19 · 未评级 · 17 票 Certificate Hostname Validation Bypass via Leading Dot in Hostnamecurl · 2025-12-09 · 低危 · 17 票 TLS session cache case-folds CA paths and bypasses the active trust profilecurl · 2026-08-25 · 低危 · 15 票 Remotely trigger an assertion on a TLS server with a malformed certificate stringNode.js · 2020-02-06 · 高危 · 15 票 Improper certificate validation for non-canonical IPv4 hostnames allows DNS SANs to authenticate IP endpointsNode.js · 2026-10-23 · 低危 · 13 票 Desktop client does not verify received singed certificate in end to end encryptionNextcloud · 2023-04-27 · 低危 · $1,000 · 13 票 Connector/C TLS auth-switch bypass exposes plaintext password on hostname verification failureMariaDB · 2026-11-04 · 未评级 · 12 票 Silent TLS Trust Model Hijacking via `CURL_CA_BUNDLE` Environment Variable Leads to MITMcurl · 2025-11-11 · 高危 · 11 票 curl allows SSH connection even if host is not in known_hostscurl · 2025-02-05 · 中危 · 11 票 CVE-2024-2379: QUIC certificate check bypass with wolfSSLcurl · 2024-03-27 · 低危 · 11 票 OpenSSL::X509::Name Equality Check Does Not Work, Patch includedRuby · 2018-10-19 · 低危 · 11 票 nextcloudcmd incorrectly trusts bad TLS certificatesNextcloud · 2022-12-25 · 低危 · 10 票 08: CVE-2026-7009 fix incomplete for AWS-LC: `--cert-status` bypass on SecTrust pathcurl · 2026-09-08 · 未评级 · 9 票 06: Incomplete fix for CVE-2026-7009: GCC/SecTrust builds silently discard stapled OCSP responsescurl · 2026-08-31 · 未评级 · 9 票 Mail does not verify IMAP/SMTP host connected via TLSNextcloud · 2020-06-03 · 低危 · 9 票 HSTS cache file: three trailing dots silently disable HSTS for that hostcurl · 2026-10-20 · 低危 · 8 票 Pinned public key check passes for a key the server does not hold with the wolfSSL backendcurl · 2026-10-22 · 低危 · 8 票 CVE-2026-12064: proto-default skips SSH verificationcurl · 2026-06-24 · 低危 · 8 票 Certificate Pinning Bypass with wolfSSL backend over HTTP/3curl · 2025-12-17 · 低危 · 7 票 The Microsoft Store Uber App Does Not Implement Certificate PinningUber · 2017-12-24 · 高危 · 7 票 TLS session cache key omits native_ca_store: a session validated with CURLSSLOPT_NATIVE_CA can be resumed by a transfer that disabled it (incomplete fcurl · 2026-10-20 · 低危 · 6 票 `set_daemon` wallet-rpc silently ignores `ssl_allowed_fingerprints` → pinning bypassed, wallet↔daemon MITMMonero · 2026-08-05 · 中危 · 6 票 TLS session cache ignores CURLOPT_SSL_CTX_FUNCTION identity and resumes one client's session for anothercurl · 2026-10-20 · 低危 · 5 票 wolfSSL TLS sessions retain native-CA trust after the application narrows trustcurl · 2026-10-26 · 低危 · 5 票 Undici ProxyAgent vulnerable to MITMInternet Bug Bounty · 2022-07-13 · 中危 · $1,000 · 5 票 CVE-2026-115528: wolfSSL TLS connect without certcurl · 2026-10-26 · 低危 · 4 票 CVE-2026-111484: OpenSSL with SecTrust accepts bad OCSP staplescurl · 2026-10-26 · 低危 · 4 票 CVE-2023-28321: IDN wildcard matchInternet Bug Bounty · 2023-06-25 · 低危 · 4 票 Undici does not use CONNECT or otherwise validate upstream HTTPS certificates when using a proxyNode.js · 2022-07-13 · 中危 · 4 票 Social App does not validate server certificates for outgoing connectionsNextcloud · 2020-11-17 · 低危 · 4 票 Silent omission of certificate hostname verification in LibreSSL and BoringSSLInternet Bug Bounty · 2019-09-26 · 高危 · 4 票 OpenSSL+Apple SecTrust: SecTrust accepts certificates that the app's CURLOPT_SSL_CTX_FUNCTION trust store or verify callback rejectedcurl · 2026-10-26 · 低危 · 3 票 CVE-2026-82208: wolfSSL CA-cache hit overrides callbackcurl · 2026-09-03 · 未评级 · 3 票 10: CURLOPT_MAXLIFETIME_CONN bypass on active HTTP/2 connectionscurl · 2026-09-14 · 未评级 · 3 票 CVE-2026-9545: exposing HTTP/3 early datacurl · 2026-06-24 · 低危 · 3 票 Invalid handling of X509_verify_cert() internal errors in libssl (CVE-2021-4044)Internet Bug Bounty · 2022-01-20 · 低危 · $1,200 · 3 票 Net::SMTP with tls allows forged certificates as long as the hostname matchesRuby · 2021-01-25 · 低危 · 3 票 No Email VerificationInfogram · 2017-11-03 · 低危 · 3 票 GnuTLS + Apple SecTrust discards authenticated OCSP failurecurl · 2026-10-26 · 低危 · 2 票 CVE-2026-111953: GnuTLS SecTrust OCSP staple bypasscurl · 2026-10-26 · 低危 · 2 票 CVE-2026-87866: wolfSSL public-key pinning bypasscurl · 2026-10-14 · 低危 · 2 票 CVE-2023-28321: IDN wildcard matchcurl · 2023-05-18 · 低危 · 2 票 Incorrect HTTPS CertificateWeblate · 2017-06-16 · 低危 · 2 票 wolfSSL Backend Silently Ignores --cert-status (OCSP Stapling Bypass)curl · 2026-10-20 · 低危 · 1 票 Lets Encrypt Certificates affected by CAA Rechecking IncidentEndless Group · 2020-04-01 · 低危 · 1 票 curl successfully matches IP address literal in URL against IP address literal in certificate Common Namecurl · 2021-01-08 · 未评级 · 0 票 Only OpenSSL handles a CRL when passed in via CApathcurl · 2021-01-08 · 中危 · 0 票 Improper Certificate ValidationPortSwigger Web Security · 2018-01-02 · 低危 · 0 票