https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:49:15 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-200 certfr-2015-avi-200 https://cve.radiocsirt.org/vuln/certfr-2015-avi-200 https://cve.radiocsirt.org/vuln/cnvd-2015-02857 cnvd-2015-02857 https://cve.radiocsirt.org/vuln/cnvd-2015-02857 https://cve.radiocsirt.org/vuln/euvd-2026-91912 EUVD-2026-91912 https://cve.radiocsirt.org/vuln/euvd-2026-91912 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3455 <p>Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.</p> <p>Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3455 https://cve.radiocsirt.org/vuln/ghsa-5r9c-4h43-4v5m <p>Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.</p> <p>Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-5r9c-4h43-4v5m https://cve.radiocsirt.org/vuln/gsd-2015-3455 gsd-2015-3455 https://cve.radiocsirt.org/vuln/gsd-2015-3455 https://cve.radiocsirt.org/vuln/rhsa-2015:2378 <p>squid: incorrect X509 server certificate validation (SQUID-2015:1)</p> <p>squid: incorrect X509 server certificate validation (SQUID-2015:1)</p> https://cve.radiocsirt.org/vuln/rhsa-2015:2378 https://cve.radiocsirt.org/vuln/suse-su-2016:2008-1 <p>Security update for squid</p> <p>Security update for squid</p> https://cve.radiocsirt.org/vuln/suse-su-2016:2008-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3455 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: squid3</p> <p>Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: squid3</p> <p>Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3455