# CVEs published 2012-11-04

49 CVEs were published on November 4, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3446](https://cve.now/CVE-2012-3446.md): Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name (no CVSS, apache-libcloud)
- [CVE-2012-5780](https://cve.now/CVE-2012-5780.md): The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f (no CVSS)
- [CVE-2012-5781](https://cve.now/CVE-2012-5781.md): Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or (no CVSS)
- [CVE-2012-5782](https://cve.now/CVE-2012-5782.md): Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in the subject's Common Na (no CVSS)
- [CVE-2012-5783](https://cve.now/CVE-2012-5783.md): Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that (no CVSS, commons-httpclient:commons-httpclient)
- [CVE-2012-5784](https://cve.now/CVE-2012-5784.md): Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Servic (no CVSS, org.apache.axis:axis · axis:axis)
- [CVE-2012-5785](https://cve.now/CVE-2012-5785.md): Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj (no CVSS, org.apache.axis2:axis2 · org.apache.axis2:axis2-transport-h…)
- [CVE-2012-5786](https://cve.now/CVE-2012-5786.md): The wsdl\_first\_https sample code in distribution/src/main/release/samples/wsdl\_first\_https/src/main/ in Apache CXF before 2.7.0 does not ver (no CVSS)
- [CVE-2012-5787](https://cve.now/CVE-2012-5787.md): The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f (no CVSS)
- [CVE-2012-5788](https://cve.now/CVE-2012-5788.md): The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fi (no CVSS)
- [CVE-2012-5789](https://cve.now/CVE-2012-5789.md): PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common (no CVSS)
- [CVE-2012-5790](https://cve.now/CVE-2012-5790.md): PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (C (no CVSS)
- [CVE-2012-5791](https://cve.now/CVE-2012-5791.md): PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of (no CVSS)
- [CVE-2012-5792](https://cve.now/CVE-2012-5792.md): The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or (no CVSS)
- [CVE-2012-5793](https://cve.now/CVE-2012-5793.md): The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s (no CVSS)
- [CVE-2012-5794](https://cve.now/CVE-2012-5794.md): The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or su (no CVSS)
- [CVE-2012-5795](https://cve.now/CVE-2012-5795.md): The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or (no CVSS)
- [CVE-2012-5796](https://cve.now/CVE-2012-5796.md): The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj (no CVSS)
- [CVE-2012-5797](https://cve.now/CVE-2012-5797.md): The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) (no CVSS)
- [CVE-2012-5798](https://cve.now/CVE-2012-5798.md): The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name ( (no CVSS)
- [CVE-2012-5799](https://cve.now/CVE-2012-5799.md): The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common (no CVSS)
- [CVE-2012-5800](https://cve.now/CVE-2012-5800.md): The eBay module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAlt (no CVSS)
- [CVE-2012-5801](https://cve.now/CVE-2012-5801.md): The PayPal module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectA (no CVSS)
- [CVE-2012-5802](https://cve.now/CVE-2012-5802.md): The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAlt (no CVSS)
- [CVE-2012-5803](https://cve.now/CVE-2012-5803.md): The Authorize.Net module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or sub (no CVSS)
- [CVE-2012-5804](https://cve.now/CVE-2012-5804.md): The CyberSource module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subje (no CVSS)
- [CVE-2012-5805](https://cve.now/CVE-2012-5805.md): The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or (no CVSS)
- [CVE-2012-5806](https://cve.now/CVE-2012-5806.md): The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) (no CVSS)
- [CVE-2012-5807](https://cve.now/CVE-2012-5807.md): The Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) (no CVSS)
- [CVE-2012-5808](https://cve.now/CVE-2012-5808.md): The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subject (no CVSS)
- [CVE-2012-5809](https://cve.now/CVE-2012-5809.md): The Groupon Redemptions application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (no CVSS)
- [CVE-2012-5810](https://cve.now/CVE-2012-5810.md): The Chase mobile banking application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (no CVSS)
- [CVE-2012-5811](https://cve.now/CVE-2012-5811.md): The Breezy application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subje (no CVSS)
- [CVE-2012-5812](https://cve.now/CVE-2012-5812.md): The ACRA library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltN (no CVSS)
- [CVE-2012-5813](https://cve.now/CVE-2012-5813.md): The Android\_Pusher library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s (no CVSS)
- [CVE-2012-5814](https://cve.now/CVE-2012-5814.md): Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject's C (no CVSS)
- [CVE-2012-5815](https://cve.now/CVE-2012-5815.md): The Rackspace app 2.1.5 for iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectA (no CVSS)
- [CVE-2012-5816](https://cve.now/CVE-2012-5816.md): AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj (no CVSS)
- [CVE-2012-5817](https://cve.now/CVE-2012-5817.md): Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostn (no CVSS, org.codehaus.xfire:xfire-core)
- [CVE-2012-5818](https://cve.now/CVE-2012-5818.md): ElephantDrive does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th (no CVSS)
- [CVE-2012-5819](https://cve.now/CVE-2012-5819.md): FilesAnywhere does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th (no CVSS)
- [CVE-2012-5820](https://cve.now/CVE-2012-5820.md): The developer-account sample code in Google AdMob does not verify that the server hostname matches a domain name in the subject's Common Nam (no CVSS)
- [CVE-2012-5821](https://cve.now/CVE-2012-5821.md): Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers (no CVSS)
- [CVE-2012-5822](https://cve.now/CVE-2012-5822.md): The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj (no CVSS)
- [CVE-2012-5823](https://cve.now/CVE-2012-5823.md): Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f (no CVSS)
- [CVE-2012-5824](https://cve.now/CVE-2012-5824.md): Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field o (no CVSS)
- [CVE-2012-5825](https://cve.now/CVE-2012-5825.md): Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 (no CVSS, tweepy)
- [CVE-2012-4987](https://cve.now/CVE-2012-4987.md): Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a craf (no CVSS)
- [CVE-2012-5170](https://cve.now/CVE-2012-5170.md): Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-11-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.