https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:59:52 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2014-5277 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2014-5277 https://cve.radiocsirt.org/vuln/euvd-2026-100622 EUVD-2026-100622 https://cve.radiocsirt.org/vuln/euvd-2026-100622 https://cve.radiocsirt.org/vuln/fkie_cve-2014-5277 <p>Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.</p> <p>Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-5277 https://cve.radiocsirt.org/vuln/ghsa-8w94-cf6g-c8mg <p><strong>Affected:</strong> Go: github.com/docker/docker</p> <p>Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.</p> <p><strong>Affected:</strong> Go: github.com/docker/docker</p> <p>Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.</p> https://cve.radiocsirt.org/vuln/ghsa-8w94-cf6g-c8mg https://cve.radiocsirt.org/vuln/gsd-2014-5277 gsd-2014-5277 https://cve.radiocsirt.org/vuln/gsd-2014-5277 https://cve.radiocsirt.org/vuln/msrc_cve-2014-5277 msrc_CVE-2014-5277 https://cve.radiocsirt.org/vuln/msrc_cve-2014-5277 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10532-1 <p>docker-1.12.3-4.1 on GA media</p> <p>docker-1.12.3-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10532-1 https://cve.radiocsirt.org/vuln/pysec-2014-80 <p><strong>Affected:</strong> PyPI: docker-py</p> <p>Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.</p> <p><strong>Affected:</strong> PyPI: docker-py</p> <p>Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.</p> https://cve.radiocsirt.org/vuln/pysec-2014-80 https://cve.radiocsirt.org/vuln/suse-su-2025:03540-1 <p>Security update for docker-stable</p> <p>Security update for docker-stable</p> https://cve.radiocsirt.org/vuln/suse-su-2025:03540-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-5277 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: docker.io</p> <p>Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: docker.io</p> <p>Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-5277