CVEs published November 4, 2012
49 CVEs were published on November 4, 2012: 0 critical, 0 high.
- Published
- 49
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 49
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- apache-libcloud
- 1
- commons-httpclient:commons-httpclient
- 1
- org.apache.axis:axis · axis:axis
- 1
- org.apache.axis2:axis2 · org.apache.axis2:axis2-transport-h…
- 1
- org.codehaus.xfire:xfire-core
- 1
- tweepy
- 1
Medium, low and unrated 49
- CVE-2012-3446Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name apache-libcloud
- CVE-2012-5780The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f
- CVE-2012-5781Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or
- CVE-2012-5782Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in the subject's Common Na
- CVE-2012-5783Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that commons-httpclient:commons-httpclient
- CVE-2012-5784Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Servicorg.apache.axis:axis · axis:axis
- CVE-2012-5785Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjorg.apache.axis2:axis2 · org.apache.axis2:axis2-transport-h…
- CVE-2012-5786The wsdl_first_https sample code in distribution/src/main/release/samples/wsdl_first_https/src/main/ in Apache CXF before 2.7.0 does not ver
- CVE-2012-5787The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f
- CVE-2012-5788The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fi
- CVE-2012-5789PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common
- CVE-2012-5790PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (C
- CVE-2012-5791PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of
- CVE-2012-5792The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or
- CVE-2012-5793The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s
- CVE-2012-5794The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or su
- CVE-2012-5795The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or
- CVE-2012-5796The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj
- CVE-2012-5797The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN)
- CVE-2012-5798The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (
- CVE-2012-5799The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common
- CVE-2012-5800The eBay module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAlt
- CVE-2012-5801The PayPal module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectA
- CVE-2012-5802The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAlt
- CVE-2012-5803The Authorize.Net module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or sub
- CVE-2012-5804The CyberSource module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subje
- CVE-2012-5805The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or
- CVE-2012-5806The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN)
- CVE-2012-5807The Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN)
- CVE-2012-5808The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subject
- CVE-2012-5809The Groupon Redemptions application for Android does not verify that the server hostname matches a domain name in the subject's Common Name
- CVE-2012-5810The Chase mobile banking application for Android does not verify that the server hostname matches a domain name in the subject's Common Name
- CVE-2012-5811The Breezy application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subje
- CVE-2012-5812The ACRA library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltN
- CVE-2012-5813The Android_Pusher library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s
- CVE-2012-5814Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject's C
- CVE-2012-5815The Rackspace app 2.1.5 for iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectA
- CVE-2012-5816AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj
- CVE-2012-5817Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostnorg.codehaus.xfire:xfire-core
- CVE-2012-5818ElephantDrive does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th
- CVE-2012-5819FilesAnywhere does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th
- CVE-2012-5820The developer-account sample code in Google AdMob does not verify that the server hostname matches a domain name in the subject's Common Nam
- CVE-2012-5821Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers
- CVE-2012-5822The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj
- CVE-2012-5823Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f
- CVE-2012-5824Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field o
- CVE-2012-5825Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509tweepy
- CVE-2012-4987Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a craf
- CVE-2012-5170Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing att