2012

The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in

The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the sub

The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subjec

The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Comm

The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's

The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's Co

The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's C

The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's

PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or sub

PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subj

PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in t

The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN)

The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN)

The wsdl_first_https sample code in distribution/src/main/release/samples/wsdl_first_https/src/main/ in Apache CXF befor

Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Comm

Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, d

Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in the

Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's

The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN)

Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname ma

Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and

Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbit

The Passcode Lock implementation in Apple iOS before 6.0.1 does not properly manage the lock state, which allows physica

The extensions APIs in the kernel in Apple iOS before 6.0.1 provide kernel addresses in responses that contain an OSBund

Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary

Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the Fla

The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type,

Cross-site scripting (XSS) vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for

Cross-site scripting (XSS) vulnerability in the administrative interface in the Better Revisions module 7.x-1.x before 7

The Subuser module before 6.x-1.8 for Drupal does not properly check "switch subuser" permissions, which allows remote a

Cross-site request forgery (CSRF) vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers

Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDepl

Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5

Cross-site scripting (XSS) vulnerability in the settings page (admin/settings/hotblocks) in the Hotblocks module 6.x-1.x

The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks"

Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13

AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages r

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote att

Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWi

Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM suppor

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after

Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for J

Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web s

The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announceme

The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows

Cross-site scripting (XSS) vulnerability in the Custom Publishing Options module 6.x-1.x before 6.x-1.4 for Drupal allow