November 2012

436 results · Feed

• Unscored —
  CVE-2012-5280 EPSS 11%

  Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 1…

  Nov 7, 2012
• Unscored —
  CVE-2011-5237

  PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or …

  Nov 6, 2012
• Unscored —
  CVE-2011-5242

  tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) o…

  Nov 6, 2012
• Unscored —
  CVE-2011-5238

  google-checkout-php-sample-code before 1.3.2 does not verify that the server hostname matches a domain name in the subj…

  Nov 6, 2012
• Unscored —
  CVE-2011-5243

  TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjec…

  Nov 6, 2012
• Unscored —
  CVE-2011-5241

  Services_Twitter 0.6.3 does not verify that the server hostname matches a domain name in the subject's Common Name (CN)…

  Nov 6, 2012
• Unscored —
  CVE-2011-5239

  CiviCRM 4.0.5 and 4.1.1 does not verify that the server hostname matches a domain name in the subject's Common Name (CN…

  Nov 6, 2012
• Unscored —
  CVE-2011-5236

  Moneris eSelectPlus 2.03 PHP API does not verify that the server hostname matches a domain name in the subject's Common…

  Nov 6, 2012
• Unscored —
  CVE-2011-5240

  Magento 1.5 and 1.6.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) …

  Nov 6, 2012
• Medium 5.9
  CVE-2012-3446

  Apache Libcloud vulnerable to certificate impersonation

  Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle atta…

  apache-libcloud libcloud Debian PyPI
  Nov 4, 2012
• Medium 5.3
  CVE-2012-5825

  Tweepy does not verify SSL Certificate

  Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related…

  tweepy tweepy Debian PyPI
  Nov 4, 2012
• Medium —
  CVE-2012-5784

  Man-in-the-middle attack in Apache Axis

  Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name…

  axis org.apache.axis:axis axis:axis Debian Maven
  Nov 4, 2012
• Unscored —
  CVE-2012-5782

  Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in th…

  Nov 4, 2012
• Unscored —
  CVE-2012-5794

  The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's C…

  Nov 4, 2012
• Medium —
  CVE-2012-5783

  Improper Certificate Validation in Apache Commons HttpClient

  Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif…

  trino trino-plugin-opensearch trino-plugin-lakehouse trino-plugin-pinot Debian Wolfi Maven
  Nov 4, 2012
• Unscored —
  CVE-2012-5787

  The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN…

  Nov 4, 2012
• Unscored —
  CVE-2012-5803

  The Authorize.Net module in Ubercart does not verify that the server hostname matches a domain name in the subject's Co…

  Nov 4, 2012
• Unscored —
  CVE-2012-5788

  The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN)…

  Nov 4, 2012
• Unscored —
  CVE-2012-5824

  Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s…

  Nov 4, 2012
• Unscored —
  CVE-2012-5802

  The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Na…

  Nov 4, 2012
• Unscored —
  CVE-2012-5801

  The PayPal module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common …

  Nov 4, 2012
• Unscored —
  CVE-2012-5792

  The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject'…

  Nov 4, 2012
• Unscored —
  CVE-2012-5813

  The Android_Pusher library for Android does not verify that the server hostname matches a domain name in the subject's …

  Nov 4, 2012
• Unscored —
  CVE-2012-5816

  AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Com…

  Nov 4, 2012
• Unscored —
  CVE-2012-5814

  Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain na…

  Nov 4, 2012
• Unscored —
  CVE-2012-5820

  The developer-account sample code in Google AdMob does not verify that the server hostname matches a domain name in the…

  Nov 4, 2012
• Unscored —
  CVE-2012-5798

  The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the su…

  Nov 4, 2012
• Medium —
  CVE-2012-5785

  Apache Axis2 has Improper Input Validation

  Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitra…

  org.apache.axis2:axis2 org.apache.axis2:axis2-transport-http Maven
  Nov 4, 2012
• High 7.4
  CVE-2012-5817

  Improper Input Validation in XFire

  Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which all…

  org.codehaus.xfire:xfire-core Maven
  Nov 4, 2012
• Unscored —
  CVE-2012-5799

  The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in…

  Nov 4, 2012
• Unscored —
  CVE-2012-5812

  The ACRA library for Android does not verify that the server hostname matches a domain name in the subject's Common Nam…

  Nov 4, 2012
• Unscored —
  CVE-2012-5800

  The eBay module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Na…

  Nov 4, 2012
• Unscored —
  CVE-2012-5811

  The Breezy application for Android does not verify that the server hostname matches a domain name in the subject's Comm…

  Nov 4, 2012
• Unscored —
  CVE-2012-5822

  The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Com…

  Nov 4, 2012
• Unscored —
  CVE-2012-5808

  The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common…

  Nov 4, 2012
• Unscored —
  CVE-2012-5797

  The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subje…

  Nov 4, 2012
• Unscored —
  CVE-2012-5790

  PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the sub…

  Nov 4, 2012
• Unscored —
  CVE-2012-5780

  The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN…

  Nov 4, 2012
• Unscored —
  CVE-2012-5807

  The Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a domain name in the subje…

  Nov 4, 2012
• Unscored —
  CVE-2012-5804

  The CyberSource module in Ubercart does not verify that the server hostname matches a domain name in the subject's Comm…

  Nov 4, 2012