https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:11:19 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0180 certfr-2024-avi-0180 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0180 https://cve.radiocsirt.org/vuln/euvd-2026-113214 EUVD-2026-113214 https://cve.radiocsirt.org/vuln/euvd-2026-113214 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5784 <p>Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p>Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-5784 https://cve.radiocsirt.org/vuln/ghsa-55w9-c3g2-4rrh <p><strong>Affected:</strong> Maven: org.apache.axis:axis, Maven: axis:axis</p> <p>Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p><strong>Affected:</strong> Maven: org.apache.axis:axis, Maven: axis:axis</p> <p>Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-55w9-c3g2-4rrh https://cve.radiocsirt.org/vuln/gsd-2012-5784 gsd-2012-5784 https://cve.radiocsirt.org/vuln/gsd-2012-5784 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1497-1 <p>Security update for axis</p> <p>Security update for axis</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1497-1 https://cve.radiocsirt.org/vuln/rhsa-2013:0269 <p>axis: missing connection hostname check against X.509 certificate name</p> <p>axis: missing connection hostname check against X.509 certificate name</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0269 https://cve.radiocsirt.org/vuln/suse-su-2019:1373-1 <p>Security update for axis</p> <p>Security update for axis</p> https://cve.radiocsirt.org/vuln/suse-su-2019:1373-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0273 <p>Ein anonymer Angreifer im angrenzenden Netzbereich kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen oder Dateien zu manipulieren.</p> <p>Ein anonymer Angreifer im angrenzenden Netzbereich kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0273