https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:11:17.862899+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0180 certfr-2024-avi-0180 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-03T00:11:18.046980+00:00 certfr-2024-avi-0180 https://cve.radiocsirt.org/vuln/euvd-2026-113214 EUVD-2026-113214 2026-10-03T00:11:18.047032+00:00 EUVD-2026-113214 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5784 fkie_cve-2012-5784 2026-10-03T00:11:18.047054+00:00

Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://cve.radiocsirt.org/vuln/ghsa-55w9-c3g2-4rrh GHSA-55w9-c3g2-4rrh — Man-in-the-middle attack in Apache Axis 2026-10-03T00:11:18.047101+00:00

Affected: Maven: org.apache.axis:axis, Maven: axis:axis

Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://cve.radiocsirt.org/vuln/gsd-2012-5784 gsd-2012-5784 2026-10-03T00:11:18.047146+00:00 gsd-2012-5784 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1497-1 openSUSE-SU-2019:1497-1 — Security update for axis 2026-10-03T00:11:18.047165+00:00

Security update for axis

 https://cve.radiocsirt.org/vuln/rhsa-2013:0269 RHSA-2013:0269 — Red Hat Security Advisory: axis security update 2026-10-03T00:11:18.047192+00:00

axis: missing connection hostname check against X.509 certificate name

 https://cve.radiocsirt.org/vuln/suse-su-2019:1373-1 SUSE-SU-2019:1373-1 — Security update for axis 2026-10-03T00:11:18.047239+00:00

Security update for axis

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0273 WID-SEC-W-2023-0273 — IBM Maximo Asset Management: Mehrere Schwachstellen 2026-10-03T00:11:18.047267+00:00

Ein anonymer Angreifer im angrenzenden Netzbereich kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen oder Dateien zu manipulieren.