https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:48:24 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-08451 cnvd-2016-08451 https://cve.radiocsirt.org/vuln/cnvd-2016-08451 https://cve.radiocsirt.org/vuln/euvd-2026-86389 EUVD-2026-86389 https://cve.radiocsirt.org/vuln/euvd-2026-86389 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7099 <p>The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.</p> <p>The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-7099 https://cve.radiocsirt.org/vuln/ghsa-79cw-cghj-vx7w <p>The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.</p> <p>The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-79cw-cghj-vx7w https://cve.radiocsirt.org/vuln/gsd-2016-7099 gsd-2016-7099 https://cve.radiocsirt.org/vuln/gsd-2016-7099 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10247-1 <p>nodejs4-4.7.0-1.1 on GA media</p> <p>nodejs4-4.7.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10247-1 https://cve.radiocsirt.org/vuln/rhsa-2017:0002 <p>V8: integer overflow leading to buffer overflow in Zone::New c-ares: Single byte out of buffer write nodejs: reason argument in ServerResponse#writeHead() not properly validated nodejs: wildcard certificates not properly validated</p> <p>V8: integer overflow leading to buffer overflow in Zone::New c-ares: Single byte out of buffer write nodejs: reason argument in ServerResponse#writeHead() not properly validated nodejs: wildcard certificates not properly validated</p> https://cve.radiocsirt.org/vuln/rhsa-2017:0002 https://cve.radiocsirt.org/vuln/suse-su-2016:2470-1 <p>Security update for nodejs4</p> <p>Security update for nodejs4</p> https://cve.radiocsirt.org/vuln/suse-su-2016:2470-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7099 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs</p> <p>The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs</p> <p>The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7099 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3114 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Server und Red Hat Enterprise Linux Workstation ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder falsche Informationen darzustellen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Server und Red Hat Enterprise Linux Workstation ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder falsche Informationen darzustellen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3114