CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2010/10/14 5:58 a.m.•19 views

CVE-2010-3900

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

5.8CVSS8.4AI score0.01245EPSS

Exploits0References9

OSV•added 2010/10/14 5:58 a.m.•8 views

CVE-2010-3900

6.3AI score

Exploits0References9

CVE•added 2010/10/12 9:0 p.m.•44 views

CVE-2010-3900

CVE-2010-3900 affects Midori before 0.2.5 when used with WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91. Root cause: X.509 certificates are not verified, allowing MITM attackers to spoof HTTPS sites with a crafted server certificate. Impact is Spoofed HTTPS sites and potential data exposure. ...

5.8CVSS8.3AI score0.01245EPSS

Exploits0References9Affected Software1