20526 matches found
CVE-2011-5237
PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2011-5242
tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the certificate’s CN or subjectAltName, enabling MITM via an arbitrary valid certificate. Impact per sources: partial confidentiality and partial integrity, with network attack vector and no authentication requ...
CVE-2011-5236
Moneris eSelectPlus 2.03 PHP API is affected by a hostname verification flaw in SSL/TLS: it does not check that the server certificate CN/subjectAltName matches the server hostname, enabling potential man-in-the-middle spoofing with an arbitrary valid certificate. This is documented in CVE-2011-5...
CVE-2011-5240
Magento 1.5 and 1.6.2 do not verify that the server hostname matches the domain name in the certificate's CN/subjectAltName, enabling MITM via an arbitrary valid X.509 certificate. This is the core vulnerability; exploitation status and concrete fixes/versions are not provided in the connected do...
CVE-2011-5243
CVE-2011-5243 describes a hostname verification flaw in TwitterOAuth where the server’s hostname is not validated against the certificate’s CN/subjectAltName, enabling MITM with an arbitrary valid certificate. The connected records do not specify affected product versions, exact root cause detail...
Fedora Update for kernel FEDORA-2012-17479
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-17479 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Fedora Update for kernel FEDORA-2012-17462
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-17462 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Indusoft Thin Client ISSymbol ActiveX Control InternationalOrder buffer overflow
Added: 11/02/2012 CVE: CVE-2011-0340 BID: 47596 OSVDB: 72865 Background Indusoft Thin Client allows access to Indusoft Web Studio projects without requiring Web Studio to be installed. It includes the ISSymbol ActiveX control, which is also included in Indusoft Web Studio and Advantech Studio...
VLC Media Player TiVo Demuxer Double Free Vulnerability (Mac OS X)
This host is installed with VLC Media Player and is prone to double free vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerdemuxerdoublefreevulnmacosx.nasl 5988 2017-04-20 09:02:29Z teissa $ VLC Media Player TiVo Demuxer Double Free Vulnerability Mac OS X Authors: Antu Sanadi...
Fedora Update for dokuwiki FEDORA-2012-16605
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Security fix for the ALT Linux 6 package perl-Encode version 2.47-alt0.M60P.1
Oct. 30, 2012 Vladimir Lettiev 2.47-alt0.M60P.1 - Backported to p6 including fix for CVE-2011-2939...
Fedora Update for kernel FEDORA-2012-16669
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for kernel FEDORA-2012-16669
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-16669 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
[ MDVSA-2012:168 ] hostapd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:168 http://www.mandriva.com/security/ Package : hostapd Date : October 22, 2012 Affected: 2011. Problem Description: Multiple vulnerabilities has been discovered and corrected in hostapd: hostapd 0.7.3, and...
Fedora Update for icecast FEDORA-2012-16147
Check for the Version of icecast OpenVAS Vulnerability Test Fedora Update for icecast FEDORA-2012-16147 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for icecast FEDORA-2012-16147
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)
This host is missing an important security update according to Microsoft Bulletin MS11-079. OpenVAS Vulnerability Test $Id: secpodms11-079.nasl 5958 2017-04-17 09:02:19Z teissa $ MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities 2544641 Authors: Madhuri D Copyright:...
Ubuntu Update for python3.1 USN-1616-1
Ubuntu Update for Linux kernel vulnerabilities USN-1616-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16161.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for python3.1 USN-1616-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...
Ubuntu: Security Advisory (USN-1616-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
