Skip to content
OpenAdvisories

Archive

4 November 2012

Vulnerabilities first published on this day (UTC), newest first.

← October 2012 2012 / November /4 December 2012 →
  1. 17
  2. 28
  3. 33
  4. 449
  5. 5 
  6. 68
  7. 724
  8. 86
  9. 99
  10. 101
  11. 1119
  12. 12 
  13. 138
  14. 1431
  15. 154
  16. 1615
  17. 1734
  18. 1821
  19. 1911
  20. 2012
  21. 2145
  22. 222
  23. 2336
  24. 2413
  25. 25 
  26. 2618
  27. 279
  28. 2814
  29. 293
  30. 3026
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.9
    CVE-2012-3446

    Apache Libcloud vulnerable to certificate impersonation

    Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle atta…

    apache-libcloud libcloud Debian PyPI
  • Medium 5.3
    CVE-2012-5825

    Tweepy does not verify SSL Certificate

    Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related…

    tweepy tweepy Debian PyPI
  • Medium —
    CVE-2012-5784

    Man-in-the-middle attack in Apache Axis

    Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name…

    axis org.apache.axis:axis axis:axis Debian Maven
  • Medium —
    CVE-2012-5783

    Improper Certificate Validation in Apache Commons HttpClient

    Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif…

    trino trino-plugin-opensearch trino-plugin-lakehouse trino-plugin-pinot Debian Wolfi Maven
  • Medium —
    CVE-2012-5785

    Apache Axis2 has Improper Input Validation

    Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitra…

    org.apache.axis2:axis2 org.apache.axis2:axis2-transport-http Maven