7 matches found
CVE-2026-18108
creationtimestamp| type| source ---|---|--- 2026-08-03 21:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fdcwaxk22 2026-08-03 23:11:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117034101614868174 2026-08-03 23:11:16+00:00| seen|...
CVE-2026-18108
Net::SAML2 versions before 0.86 for Perl allow authentication bypass because verifyencryptedassertion accepts an EncryptedAssertion whose decrypted content carries no signature. verifyencryptedassertion decrypts the EncryptedAssertion and returns it as verified when it carries no signature, via...
CVE-2017-18108
creationtimestamp| type| source ---|---|--- 2019-03-29 17:28:42+00:00| seen| https://t.me/cibsecurity/3437...
CVE-2017-18108
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection...
CVE-2017-18108
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection...
CVE-2017-18108
CVE-2017-18108 affects Atlassian Crowd prior to version 2.10.2. The administration SMTP configuration resource contains a JNDI injection vulnerability that allows remote attackers with administration rights to execute arbitrary code. Impact: arbitrary code execution with admin privileges; CVSS3 b...