Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 08:28:57 +0000 CERTA-2011-AVI-231 — Plusieurs vulnérabilités permettant une injection de code indirecte à distance ainsi qu'une attaque de type <span class… https://vulnerability.circl.lu/vuln/CERTA-2011-AVI-231 CERTA-2011-AVI-231 https://vulnerability.circl.lu/vuln/CERTA-2011-AVI-231 bdu:2015-09700 https://vulnerability.circl.lu/vuln/bdu:2015-09700 bdu:2015-09700 https://vulnerability.circl.lu/vuln/bdu:2015-09700 fkie_cve-2011-1094 https://vulnerability.circl.lu/vuln/fkie_cve-2011-1094 <p>kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate Certification Authority for an IP address, a different vulnerability than CVE-2009-2702.</p> <p>kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate Certification Authority for an IP address, a different vulnerability than CVE-2009-2702.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2011-1094 GHSA-9793-cggf-824w https://vulnerability.circl.lu/vuln/ghsa-9793-cggf-824w <p>kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate Certification Authority for an IP address, a different vulnerability than CVE-2009-2702.</p> <p>kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate Certification Authority for an IP address, a different vulnerability than CVE-2009-2702.</p> https://vulnerability.circl.lu/vuln/ghsa-9793-cggf-824w gsd-2011-1094 https://vulnerability.circl.lu/vuln/gsd-2011-1094 gsd-2011-1094 https://vulnerability.circl.lu/vuln/gsd-2011-1094 RHSA-2011:0464 — Red Hat Security Advisory: kdelibs security update https://vulnerability.circl.lu/vuln/rhsa-2011:0464 <p>kdelibs: SSL certificate for IP address accepted as valid for hosts that resolve to the IP kdelibs: partially universal XSS in Konqueror error pages</p> <p>kdelibs: SSL certificate for IP address accepted as valid for hosts that resolve to the IP kdelibs: partially universal XSS in Konqueror error pages</p> https://vulnerability.circl.lu/vuln/rhsa-2011:0464