https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:01:44.000376+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-050 certfr-2015-avi-050 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">IBM</span>. Certaines d'entre elle… 2026-10-02T18:01:44.114027+00:00 certfr-2015-avi-050 https://cve.radiocsirt.org/vuln/euvd-2026-99354 EUVD-2026-99354 2026-10-02T18:01:44.114083+00:00 EUVD-2026-99354 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3596 fkie_cve-2014-3596 2026-10-02T18:01:44.114104+00:00

The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784.

 https://cve.radiocsirt.org/vuln/ghsa-r53v-vm87-f72c GHSA-r53v-vm87-f72c — Improper Validation of Certificates in apache axis 2026-10-02T18:01:44.114148+00:00

Affected: Maven: org.apache.axis:axis, Maven: axis:axis

The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784.

 https://cve.radiocsirt.org/vuln/gsd-2014-3596 gsd-2014-3596 2026-10-02T18:01:44.114189+00:00 gsd-2014-3596 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1497-1 openSUSE-SU-2019:1497-1 — Security update for axis 2026-10-02T18:01:44.114207+00:00

Security update for axis

 https://cve.radiocsirt.org/vuln/rhsa-2014:1193 RHSA-2014:1193 — Red Hat Security Advisory: axis security update 2026-10-02T18:01:44.114233+00:00

axis: SSL hostname verification bypass, incomplete CVE-2012-5784 fix

 https://cve.radiocsirt.org/vuln/suse-su-2019:1373-1 SUSE-SU-2019:1373-1 — Security update for axis 2026-10-02T18:01:44.114256+00:00

Security update for axis

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3596 Withdrawn: UBUNTU-CVE-2014-3596 2026-10-02T18:01:44.114277+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: axis

The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0273 WID-SEC-W-2023-0273 — IBM Maximo Asset Management: Mehrere Schwachstellen 2026-10-02T18:01:44.114308+00:00

Ein anonymer Angreifer im angrenzenden Netzbereich kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen oder Dateien zu manipulieren.