CVE-2014-2901

wolfssl before 3.2.0 does not properly issue certificates for a server's hostname...

Improper Hostname Validation

nusoap does not properly validate hostnames. This is due to incorrect configuration of the CURLOPTSSLVERIFYHOST parameter, leading to improper validation of hostname of a certificat3e and allowing an attacker to perform Man-in-the-Middle MitM attacks...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

DEBIAN-CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

Code injection

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

UBUNTU-CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

Exploit for CVE-2018-2894

Ladon Scanner for Python !Authorhttps://img.shields.io/bad...

CVE-2012-6071

CVE-2012-6071 affects nuSOAP prior to 0.7.3-5, where hostname verification of X.509 certificates is inadequate. This is observed as improper hostname validation in nuSOAP, enabling potential Man-in-the-Middle scenarios as reported by sources citing CURLOP_SSL_VERIFYHOST misconfiguration. Document...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

activemq: ActiveMQ Client Missing TLS Hostname Verification

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default...

CVE-2014-8167

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack...

CVE-2014-8167

CVE-2014-8167 affects vdsm and vdsclient; the root cause is missing hostname validation when communicating with another vdsm, which could allow a man-in-the-middle attack. The connected sources confirm the vulnerable component and the behavioral flaw, but do not provide a patch version or mitigat...

CVE-2014-8167

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack...

CVE-2019-17524

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp. An intranet host can use a crafted hostname to exploit this...

Cross site scripting

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp. An intranet host can use a crafted hostname to exploit this...

CVE-2019-17524

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp. An intranet host can use a crafted hostname to exploit this...

Moderate: Red Hat Security Advisory: rh-python36-python security, bug fix, and enhancement update

An update for rh-python36-python is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...