https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:28:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-100534 EUVD-2026-100534 https://cve.radiocsirt.org/vuln/euvd-2026-100534 https://cve.radiocsirt.org/vuln/fkie_cve-2014-5075 <p>The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p>The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-5075 https://cve.radiocsirt.org/vuln/ghsa-pxxv-xr7h-7624 <p>The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p>The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-pxxv-xr7h-7624 https://cve.radiocsirt.org/vuln/gsd-2014-5075 gsd-2014-5075 https://cve.radiocsirt.org/vuln/gsd-2014-5075 https://cve.radiocsirt.org/vuln/rhsa-2015:1176 <p>async-http-client: SSL/TLS certificate verification is disabled under certain conditions async-http-client: missing hostname verification for SSL certificates smack: incorrect X.509 certificate validation smack: IQ response spoofing CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix smack: MitM vulnerability wss4j: Apache WSS4J is vulnerable to Bleichenbacher&#39;s attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn&#39;t correctly enforce the requireSignedEncryptedDataElements property Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation activemq: Fileserver web application vulnerability allowing RCE</p> <p>async-http-client: SSL/TLS certificate verification is disabled under certain conditions async-http-client: missing hostname verification for SSL certificates smack: incorrect X.509 certificate validation smack: IQ response spoofing CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix smack: MitM vulnerability wss4j: Apache WSS4J is vulnerable to Bleichenbacher&#39;s attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn&#39;t correctly enforce the requireSignedEncryptedDataElements property Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation activemq: Fileserver web application vulnerability allowing RCE</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1176