https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:49:44 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-04543 cnvd-2015-04543 https://cve.radiocsirt.org/vuln/cnvd-2015-04543 https://cve.radiocsirt.org/vuln/euvd-2026-90539 EUVD-2026-90539 https://cve.radiocsirt.org/vuln/euvd-2026-90539 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1796 <p>The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.</p> <p>The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-1796 https://cve.radiocsirt.org/vuln/ghsa-78fq-w796-q537 <p><strong>Affected:</strong> Maven: org.opensaml:opensaml, Maven: edu.internet2.middleware:shibboleth-identityprovider</p> <p>The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.</p> <p><strong>Affected:</strong> Maven: org.opensaml:opensaml, Maven: edu.internet2.middleware:shibboleth-identityprovider</p> <p>The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.</p> https://cve.radiocsirt.org/vuln/ghsa-78fq-w796-q537 https://cve.radiocsirt.org/vuln/gsd-2015-1796 gsd-2015-1796 https://cve.radiocsirt.org/vuln/gsd-2015-1796 https://cve.radiocsirt.org/vuln/rhsa-2015:1176 <p>async-http-client: SSL/TLS certificate verification is disabled under certain conditions async-http-client: missing hostname verification for SSL certificates smack: incorrect X.509 certificate validation smack: IQ response spoofing CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix smack: MitM vulnerability wss4j: Apache WSS4J is vulnerable to Bleichenbacher&#39;s attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn&#39;t correctly enforce the requireSignedEncryptedDataElements property Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation activemq: Fileserver web application vulnerability allowing RCE</p> <p>async-http-client: SSL/TLS certificate verification is disabled under certain conditions async-http-client: missing hostname verification for SSL certificates smack: incorrect X.509 certificate validation smack: IQ response spoofing CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix smack: MitM vulnerability wss4j: Apache WSS4J is vulnerable to Bleichenbacher&#39;s attack (incomplete fix for CVE-2011-2487) wss4j: Apache WSS4J doesn&#39;t correctly enforce the requireSignedEncryptedDataElements property Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation activemq: Fileserver web application vulnerability allowing RCE</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1176