Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:26:15 +0000 bdu:2015-11645 https://cve.radiocsirt.org/vuln/bdu:2015-11645 bdu:2015-11645 https://cve.radiocsirt.org/vuln/bdu:2015-11645 certfr-2015-avi-416 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apple OS X</span>. Certaines d'entre elles perm… https://cve.radiocsirt.org/vuln/certfr-2015-avi-416 certfr-2015-avi-416 https://cve.radiocsirt.org/vuln/certfr-2015-avi-416 cnvd-2015-06403 https://cve.radiocsirt.org/vuln/cnvd-2015-06403 cnvd-2015-06403 https://cve.radiocsirt.org/vuln/cnvd-2015-06403 EUVD-2026-93836 https://cve.radiocsirt.org/vuln/euvd-2026-93836 EUVD-2026-93836 https://cve.radiocsirt.org/vuln/euvd-2026-93836 fkie_cve-2015-5894 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5894 <p>The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.</p> <p>The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5894 GHSA-77w5-p2v7-hh9q https://cve.radiocsirt.org/vuln/ghsa-77w5-p2v7-hh9q <p>The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.</p> <p>The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-77w5-p2v7-hh9q gsd-2015-5894 https://cve.radiocsirt.org/vuln/gsd-2015-5894 gsd-2015-5894 https://cve.radiocsirt.org/vuln/gsd-2015-5894