Lucene search
+L

1747 matches found

RedHat Linux
RedHat Linux
added 2013/03/25 5:9 p.m.39 views

Moderate: Red Hat Security Advisory: axis security update

Updated axis packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

5.8CVSS6.8AI score0.05722EPSS
SaveExploits1References2
Oracle linux
Oracle linux
added 2013/03/25 12:0 a.m.33 views

axis security update

0:1.2.1-2jpp.7 - Add missing connection hostname check against X.509 certificate name - Resolves: CVE-2012-5784 - Add patches to build with java 1.6...

5.8CVSS1.1AI score0.05722EPSS
SaveExploits1
Amazon
Amazon
added 2013/03/02 12:0 a.m.52 views

Medium: axis

Issue Overview: Apache Axis did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain...

5.8CVSS7.7AI score0.05722EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2013/02/22 12:0 a.m.22 views

RedHat Update for axis RHSA-2013:0269-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"axi...

5.8CVSS6.9AI score0.05722EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2013/02/22 12:0 a.m.26 views

RedHat Update for axis RHSA-2013:0269-01

Check for the Version of axis OpenVAS Vulnerability Test RedHat Update for axis RHSA-2013:0269-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

5.8CVSS6.9AI score0.05722EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2013/02/21 12:0 a.m.30 views

Scientific Linux Security Update : axis on SL6.x (noarch) (20130219)

Apache Axis did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name. CVE-2012-57...

5.8CVSS7.2AI score0.05722EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2013/02/20 12:0 a.m.36 views

RHEL 6 : axis (RHSA-2013:0269)

Updated axis packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

5.8CVSS7.2AI score0.05722EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2013/02/19 8:35 p.m.42 views

Moderate: Red Hat Security Advisory: axis security update

Updated axis packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

5.8CVSS6.8AI score0.05722EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2013/02/19 8:35 p.m.14 views

axis: missing connection hostname check against X.509 certificate name

Apache Axis did not verify that the server host name matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name...

5.8CVSS6.8AI score0.05722EPSS
SaveExploits1References4
Oracle linux
Oracle linux
added 2013/02/19 12:0 a.m.46 views

axis security update

0:1.2.1-7.3 - Add missing connection hostname check against X.509 certificate name - Resolves: CVE-2012-5784...

5.8CVSS1.1AI score0.05722EPSS
SaveExploits1
NVD
NVD
added 2013/02/12 8:55 p.m.25 views

CVE-2011-5261

Cross-site scripting XSS vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to admin/showReport.shtml...

4.3CVSS5.8AI score0.03608EPSS
SaveExploits2References5
Prion
Prion
added 2013/02/12 8:55 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to admin/showReport.shtml...

4.3CVSS6.2AI score0.03608EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2013/02/12 8:0 p.m.30 views

CVE-2011-5261

Cross-site scripting XSS vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to admin/showReport.shtml...

5.8AI score0.03608EPSS
SaveExploits2References5
CVE
CVE
added 2013/02/12 8:0 p.m.57 views

CVE-2011-5261

Axis Communications M10 Series Network Cameras, specifically the M1054 with firmware 5.21 and earlier, are affected by CVE-2011-5261. The issue is a cross-site scripting (XSS) vulnerability in serverreport.cgi, exploitable via the pageTitle parameter to admin/showReport.shtml, allowing remote att...

4.3CVSS6AI score0.03608EPSS
SaveExploits2References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2013/02/04 12:0 a.m.39 views

Fedora 18 : axis-1.4-19.fc18 (2013-1222)

This update fixes a security vulnerability that caused axis not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via andaarbitrary valid...

5.8CVSS7.2AI score0.05722EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2013/02/04 12:0 a.m.33 views

Fedora 17 : axis-1.4-19.fc17 (2013-1194)

This update fixes a security vulnerability that caused axis not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via andaarbitrary valid...

5.8CVSS7.2AI score0.05722EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2013/02/04 12:0 a.m.31 views

Fedora Update for axis FEDORA-2013-1194

Check for the Version of axis OpenVAS Vulnerability Test Fedora Update for axis FEDORA-2013-1194 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

5.8CVSS6.9AI score0.05722EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2013/02/04 12:0 a.m.30 views

Fedora Update for axis FEDORA-2013-1222

Check for the Version of axis OpenVAS Vulnerability Test Fedora Update for axis FEDORA-2013-1222 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

5.8CVSS6.9AI score0.05722EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2013/02/04 12:0 a.m.29 views

Fedora Update for axis FEDORA-2013-1194

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5.8CVSS6.9AI score0.05722EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2013/02/04 12:0 a.m.25 views

Fedora Update for axis FEDORA-2013-1222

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5.8CVSS6.9AI score0.05722EPSS
SaveExploits1References2
Rows per page
Query Builder