7 matches found
CVE-2026-45795 Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-server
The Janssen Project is an open-source identity and access management IAM platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload returns null, and...
CVE-2023-45795
creationtimestamp| type| source ---|---|--- 2026-06-22 12:07:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moutz6ssbh2j...
CVE-2023-45795
The provided CVE describes a cross-site scripting (XSS) vulnerability in the Builder Component of Pilz PASvisu before version 1.14.1. The issue allows a local unauthenticated attacker to inject malicious JavaScript and gain full control over the device. Concrete exploitation details are not provi...
TencentOS Server 4: suricata (TSSA-2024:1082)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1082 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
CVE-2024-45795
creationtimestamp| type| source ---|---|--- 2024-10-16 22:14:55+00:00| seen| https://t.me/cvedetector/8118...