Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:55:53 +0000 bdu:2015-03443 https://cve.radiocsirt.org/vuln/bdu:2015-03443 bdu:2015-03443 https://cve.radiocsirt.org/vuln/bdu:2015-03443 certa-2009-avi-336 — Une vulnérabilité dans GnuTLS permet à un utilisateur malveillant de contourner la politique de sécurité. https://cve.radiocsirt.org/vuln/certa-2009-avi-336 certa-2009-avi-336 https://cve.radiocsirt.org/vuln/certa-2009-avi-336 EUVD-2026-123554 https://cve.radiocsirt.org/vuln/euvd-2026-123554 EUVD-2026-123554 https://cve.radiocsirt.org/vuln/euvd-2026-123554 fkie_cve-2009-2730 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2730 <p>libgnutls in GnuTLS before 2.8.2 does not properly handle a &#39;\0&#39; character in a domain name in the subject&#39;s (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.</p> <p>libgnutls in GnuTLS before 2.8.2 does not properly handle a &#39;\0&#39; character in a domain name in the subject&#39;s (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-2730 GHSA-x6gw-c9hx-x25f https://cve.radiocsirt.org/vuln/ghsa-x6gw-c9hx-x25f <p>libgnutls in GnuTLS before 2.8.2 does not properly handle a &#39;\0&#39; character in a domain name in the subject&#39;s (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.</p> <p>libgnutls in GnuTLS before 2.8.2 does not properly handle a &#39;\0&#39; character in a domain name in the subject&#39;s (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.</p> https://cve.radiocsirt.org/vuln/ghsa-x6gw-c9hx-x25f gsd-2009-2730 https://cve.radiocsirt.org/vuln/gsd-2009-2730 gsd-2009-2730 https://cve.radiocsirt.org/vuln/gsd-2009-2730 RHSA-2009:1232 — Red Hat Security Advisory: gnutls security update https://cve.radiocsirt.org/vuln/rhsa-2009:1232 <p>gnutls: incorrect verification of SSL certificate with NUL in name (GNUTLS-SA-2009-4)</p> <p>gnutls: incorrect verification of SSL certificate with NUL in name (GNUTLS-SA-2009-4)</p> https://cve.radiocsirt.org/vuln/rhsa-2009:1232