CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

Exploit for CVE-2018-2894

Ladon Scanner for Python !Authorhttps://img.shields.io/bad...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

CVE-2012-6071

CVE-2012-6071 affects nuSOAP prior to 0.7.3-5, where hostname verification of X.509 certificates is inadequate. This is observed as improper hostname validation in nuSOAP, enabling potential Man-in-the-Middle scenarios as reported by sources citing CURLOP_SSL_VERIFYHOST misconfiguration. Document...

CVE-2012-6071

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

PT-2019-6804

Name of the Vulnerable Software and Affected Versions nuSOAP versions prior to 0.7.3-5 Description The issue arises from improper hostname checking of a certificate in the affected software. Recommendations For versions prior to 0.7.3-5, update to version 0.7.3-5 or later to resolve the issue...

CVE-2012-6071: Improper Certificate Validation

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...

activemq: ActiveMQ Client Missing TLS Hostname Verification

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default...

CVE-2014-8167

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack...

CVE-2014-8167

CVE-2014-8167 affects vdsm and vdsclient; the root cause is missing hostname validation when communicating with another vdsm, which could allow a man-in-the-middle attack. The connected sources confirm the vulnerable component and the behavioral flaw, but do not provide a patch version or mitigat...

CVE-2014-8167

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack...

CVE-2019-17524

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp. An intranet host can use a crafted hostname to exploit this...

Cross site scripting

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp. An intranet host can use a crafted hostname to exploit this...

CVE-2019-17524

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp. An intranet host can use a crafted hostname to exploit this...

PT-2019-7140

Name of the Vulnerable Software and Affected Versions vdsm and vdsclient affected versions not specified Description The issue concerns a lack of validation of certificate hostnames from other vdsm instances, which could facilitate a man-in-the-middle attack. Recommendations At the moment, there ...

Moderate: Red Hat Security Advisory: rh-python36-python security, bug fix, and enhancement update

An update for rh-python36-python is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2018-4031

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without...

DEBIAN-CVE-2018-21029

systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication SNI is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname...

CVE-2018-21029

systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication SNI is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname...

CVE-2018-21029

systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication SNI is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname...