PT-2012-6132

Name of the Vulnerable Software and Affected Versions Google AdMob affected versions not specified Description The issue concerns a lack of verification in the developer-account sample code that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of t...

PT-2012-6095

Name of the Vulnerable Software and Affected Versions Apache Commons HttpClient versions 3.x Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-6120

Name of the Vulnerable Software and Affected Versions Zen Cart affected versions not specified Description The issue concerns the LinkPoint module in Zen Cart, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509...

PT-2012-6137

Name of the Vulnerable Software and Affected Versions Tweepy affected versions not specified Description The issue arises from Tweepy's failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-6101

Name of the Vulnerable Software and Affected Versions PayPal Payments Standard PHP Library versions before 20120427 Description The issue is related to the intentional disabling of certificate-validation checks, allowing man-in-the-middle attackers to spoof SSL servers via an arbitrary valid...

PT-2012-6093

Name of the Vulnerable Software and Affected Versions Amazon Elastic Load Balancing API Tools affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509...

PT-2012-6103

Name of the Vulnerable Software and Affected Versions PayPal Invoicing affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-6098 · Apache · Apache Cxf

Name of the Vulnerable Software and Affected Versions: Apache CXF versions prior to 2.7.0 Description: The issue arises from the wsdl first https sample code in Apache CXF, which fails to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field...

PT-2012-6110

Name of the Vulnerable Software and Affected Versions osCommerce PayPal Pro PayFlow EC module affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509...

CVE-2012-3446: Improper Certificate Validation

Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a crafted...

UBUNTU-CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

CVE-2011-5235

SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link...

Sql injection

SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link...

CVE-2011-5235: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link...

PT-2012-2212

Name of the Vulnerable Software and Affected Versions mnoGoSearch versions prior to 3.3.12 Description The issue allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link. This is a SQL injection vulnerability. Recommendations For versions prior to 3.3.12,...

Gentoo Security Advisory GLSA 201210-01 (w3m)

The remote host is missing updates announced in advisory GLSA 201210-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201210-01 (w3m)

The remote host is missing updates announced in advisory GLSA 201210-01. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2012-3724

CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to obtain sensitive information by leveraging the construction of an HTTP request with an incorrect hostname derived from a malformed URL...

Slackware: Security Advisory (SSA:2004-239-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-5149

Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 testaddr or 2 testpass parameter to auth-settings.php; 3 hostname, 4 domainname, or 5 mailserver parameter to setup-relay.php; or 6 subnetmask or...