Export limit exceeded: 10821 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2009-3024

perl-IO-Socket-SSL: incorrect checking of certificate hostnames

The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Io-socket-ssl
Products
Io-socket-ssl
CVE-2010-4334

perl-IO-Socket-SSL: ignores user request for peer verification

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.

CVSS 2.0 · 4.0 Medium EPSS 1.8% KEV · Not listed
Vendors
Io-socket-ssl
Products
Io-socket-ssl