Approved changes feed: RSS · Atom

cpe:2.3:a:pocoproject:poco_c\+\+_libraries:1.4.6:p1:*:*:*:*:*:*

part: a version: 1.4.6 update: p1

VendorPocoproject (18ec73c8-d2b9-565e-a54b-35b0c3c8a69d)
ProductPoco C++ Libraries (28c4b00f-7d3f-52b8-b910-ac8274820e94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/poco purl2cpe 2026-10-12 21:12:08.117403
pkg:deb/ubuntu/poco purl2cpe 2026-10-12 21:12:08.117404
pkg:github/pocoproject/poco purl2cpe 2026-10-12 21:12:08.117406
pkg:maven/org.pocoproject.twilio/twilio-poco purl2cpe 2026-10-12 21:12:08.117407
pkg:rpm/fedora/poco purl2cpe 2026-10-12 21:12:08.117409
pkg:sourceforge/poco purl2cpe 2026-10-12 21:12:08.117410
pkg:sourceforge/poco.mirror purl2cpe 2026-10-12 21:12:08.117412

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0350 vulnerable 2026-06-08 05:05:12.650073 Details available
The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate.
Published: 2014-04-26T01:00:00.000Z
Updated: 2024-08-06T09:13:09.667Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.