https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:42:11.558623+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-104597 EUVD-2026-104597 2026-10-06T14:42:11.561993+00:00 EUVD-2026-104597 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0289 fkie_cve-2013-0289 2026-10-06T14:42:11.562023+00:00

Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://cve.radiocsirt.org/vuln/ghsa-x9p3-334f-m7g8 GHSA-x9p3-334f-m7g8 2026-10-06T14:42:11.562054+00:00

Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://cve.radiocsirt.org/vuln/gsd-2013-0289 gsd-2013-0289 2026-10-06T14:42:11.562071+00:00 gsd-2013-0289 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0289 Withdrawn: UBUNTU-CVE-2013-0289 2026-10-06T14:42:11.562083+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: isync

Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.