https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:16:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08705 bdu:2024-08705 https://cve.radiocsirt.org/vuln/bdu:2024-08705 https://cve.radiocsirt.org/vuln/certfr-2021-avi-539 certfr-2021-avi-539 https://cve.radiocsirt.org/vuln/certfr-2021-avi-539 https://cve.radiocsirt.org/vuln/euvd-2026-99342 EUVD-2026-99342 https://cve.radiocsirt.org/vuln/euvd-2026-99342 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3577 <p>org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;CN=&#34; string in a field in the distinguished name (DN) of a certificate, as demonstrated by the &#34;foo,CN=www.apache.org&#34; string in the O field.</p> <p>org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;CN=&#34; string in a field in the distinguished name (DN) of a certificate, as demonstrated by the &#34;foo,CN=www.apache.org&#34; string in the O field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3577 https://cve.radiocsirt.org/vuln/ghsa-cfh5-3ghh-wfjx <p><strong>Affected:</strong> Maven: org.apache.httpcomponents:httpclient</p> <p>org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;CN=&#34; string in a field in the distinguished name (DN) of a certificate, as demonstrated by the &#34;foo,CN=www.apache.org&#34; string in the O field.</p> <p><strong>Affected:</strong> Maven: org.apache.httpcomponents:httpclient</p> <p>org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;CN=&#34; string in a field in the distinguished name (DN) of a certificate, as demonstrated by the &#34;foo,CN=www.apache.org&#34; string in the O field.</p> https://cve.radiocsirt.org/vuln/ghsa-cfh5-3ghh-wfjx https://cve.radiocsirt.org/vuln/gsd-2014-3577 gsd-2014-3577 https://cve.radiocsirt.org/vuln/gsd-2014-3577 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1873-1 <p>Security update for apache-commons-httpclient</p> <p>Security update for apache-commons-httpclient</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1873-1 https://cve.radiocsirt.org/vuln/rhsa-2014:1082 <p>CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix</p> <p>CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1082 https://cve.radiocsirt.org/vuln/suse-su-2020:3149-1 <p>Security update for apache-commons-httpclient</p> <p>Security update for apache-commons-httpclient</p> https://cve.radiocsirt.org/vuln/suse-su-2020:3149-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3577 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: commons-httpclient, Ubuntu:14.04:LTS: httpcomponents-client</p> <p>org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;CN=&#34; string in a field in the distinguished name (DN) of a certificate, as demonstrated by the &#34;foo,CN=www.apache.org&#34; string in the O field.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: commons-httpclient, Ubuntu:14.04:LTS: httpcomponents-client</p> <p>org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;CN=&#34; string in a field in the distinguished name (DN) of a certificate, as demonstrated by the &#34;foo,CN=www.apache.org&#34; string in the O field.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3577 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375