Browse CVEs

MEDIUM 5.8 CVE-2012-5816 AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltNam… Aim No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5818 ElephantDrive does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 c… Elephantdrive No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5820 The developer-account sample code in Google AdMob does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or… Admob No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5823 Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of t… Opensourceclassifieds No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5825 Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certific… Tweepy No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5780 The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of t… Merchant Sdk No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5781 Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAl… Elastic Load Balancing No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5782 Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in the subject's Common Name (CN) o… Flexible Payments Service No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5784EPSS 6% Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service impleme… Activemq after 5.7.0 Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5785 Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltNam… Axis2 after 1.6.2 Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5786 The wsdl_first_https sample code in distribution/src/main/release/samples/wsdl_first_https/src/main/ in Apache CXF before 2.7.0 does not verify that … Cxf after 2.6.17 Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5787 The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of t… Merchant Sdk Patch available Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5788 The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th… Ipn No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5789 PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN)… Payments Standard No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5790 PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or sub… Payments Standard No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5791 PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.50… Invoicing No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5792 The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectA… Oscommerce No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5793 The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAlt… Authorize.net No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5794 The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltN… Moneybookers No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5795 The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAl… Paypal Express Module No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5796 The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltNam… Oscommerce No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5797 The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subje… Paypal Pro Payflow Module No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5798 The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or su… Oscommerce No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5799 The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN… Prestashop No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5800 The eBay module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fiel… Ebay Module No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5170 Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via … Pebble after 2.6.3 Fix from $1,6002012-11-04 HIGH 10.0 CVE-2012-3010EPSS 5% rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attack… Intelligent Platforms Proficy Real Time Information Portal Mitigation only Fix from $1,9502012-11-01 HIGH 10.0 CVE-2012-3021EPSS 5% rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attack… Intelligent Platforms Proficy Real Time Information Portal Mitigation only Fix from $1,9502012-11-01 HIGH 10.0 CVE-2012-3026EPSS 5% rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attack… Intelligent Platforms Proficy Real Time Information Portal Mitigation only Fix from $1,9502012-11-01 MEDIUM 5.8 CVE-2012-4489 Open redirect vulnerability in the securelogin_secure_redirect function in the Secure Login module 7.x-1.x before 7.x-1.3 for Drupal allows remote at… Securelogin Patch available Fix from $1,6002012-10-31