UBUNTU-CVE-2026-65325

Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....

CVE-2023-50454

An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers...

USN-4405-1: GLib Networking vulnerability

It was discovered that glib-networking skipped hostname certificate verification if the application failed to specify the server identity. A remote attacker could use this to perform a person-in-the-middle attack and expose sensitive information...

CVE-2014-2901

wolfssl before 3.2.0 does not properly issue certificates for a server's hostname...

CVE-2014-2901

wolfssl before 3.2.0 does not properly issue certificates for a server's hostname...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

CVE-2018-5462: Improper Certificate Validation

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information...