8 matches found
UBUNTU-CVE-2026-65325
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....
CVE-2023-50454
An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers...
USN-4405-1: GLib Networking vulnerability
It was discovered that glib-networking skipped hostname certificate verification if the application failed to specify the server identity. A remote attacker could use this to perform a person-in-the-middle attack and expose sensitive information...
CVE-2014-2901
wolfssl before 3.2.0 does not properly issue certificates for a server's hostname...
CVE-2014-2901
wolfssl before 3.2.0 does not properly issue certificates for a server's hostname...
CVE-2012-6071
nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...
