1752 matches found
Fedora Update for php-pear-CAS FEDORA-2018-6d62140b89
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
io.github.johnjcool:keycloak-cas-services (4.4.0.final), io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak (1.1.0) +65 more potentially affected by CVE-2019-3868 via org.keycloak:keycloak-core (4.4.0.final)
org.keycloak:keycloak-core MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final -...
CAs Reissue Over One Million Weak Certificates
Turns out that the software a bunch of CAs used to generate public-key certificates was flawed: they created random serial numbers with only 63 bits instead of the required 64. That may not seem like a big deal to the layman, but that one bit change means that the serial numbers only have half th...
Cross-site Scripting (XSS)
cas-server-webapp is vulnerable to cross-site scripting XSS attacks. The vulnerability exists as the security questions in casResetPasswordVerifyQuestionsView.html can contain html tags and have lack of sanitization, allowing XSS attacks...
Fedora 29 : php-pear-CAS (2018-6d62140b89)
Version 1.3.6 Security Fixes: - Fix XSS in proxy mode 271 Joachim Fritschi Bug Fixes: - Fix bad condition 252 Brice Vercoustre - Hash ticket strings to generate valid-length session-ids 224, 244, 248 Adam Franco - Fix 'phpCAS' class capitalization in code 273, 277 phy25 Improvement: - Remove...
Fedora 28 : php-pear-CAS (2018-0bc91454ce)
Version 1.3.6 Security Fixes: - Fix XSS in proxy mode 271 Joachim Fritschi Bug Fixes: - Fix bad condition 252 Brice Vercoustre - Hash ticket strings to generate valid-length session-ids 224, 244, 248 Adam Franco - Fix 'phpCAS' class capitalization in code 273, 277 phy25 Improvement: - Remove...
org.esigate:esigate-cas (3.2), org.esigate:esigate-jsf (3.2) +3 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (3.2)
org.esigate:esigate-core MAVEN version 3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - org.esigate:esigate-cas 3.2 - org.esigate:esigate-jsf 3.2 - org.esigate:esigate-oscache 3.2 -...
org.esigate:esigate-cas (3.3), org.esigate:esigate-jsf (3.3) +3 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (3.3)
org.esigate:esigate-core MAVEN version 3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - org.esigate:esigate-cas 3.3 - org.esigate:esigate-jsf 3.3 - org.esigate:esigate-oscache 3.3 -...
org.esigate:esigate-cas (3.4.1), org.esigate:esigate-jsf (3.4.1) +2 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (3.4.1)
org.esigate:esigate-core MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - org.esigate:esigate-cas 3.4.1 - org.esigate:esigate-jsf 3.4.1 - org.esigate:esigate-taglib 3.4.1 -...
org.esigate:esigate-cas (4.2), org.esigate:esigate-distribution (4.2) +4 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (4.2)
org.esigate:esigate-core MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - org.esigate:esigate-cas 4.2 - org.esigate:esigate-distribution 4.2 - org.esigate:esigate-jsf 4.2 -...
org.esigate:esigate-cas (3.4), org.esigate:esigate-jsf (3.4) +2 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (3.4)
org.esigate:esigate-core MAVEN version 3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - org.esigate:esigate-cas 3.4 - org.esigate:esigate-jsf 3.4 - org.esigate:esigate-taglib 3.4 -...
org.esigate:esigate-cas (>=5.0-beta-1, <=5.2), org.esigate:esigate-distribution (>=5.0-beta-1, <=5.2) +2 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (>=5.0-beta-1, <=5.2)
org.esigate:esigate-core MAVEN version =5.0-beta-1, =5.0-beta-1, =5.0-beta-1, =5.0-beta-1, =5.0-beta-1, =5.2 Source cves: CVE-2018-1000854 Source advisory: GHSA-HJM9-576Q-399P...
org.esigate:esigate-cas (3.1), org.esigate:esigate-jsf (3.1) +3 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (3.1)
org.esigate:esigate-core MAVEN version 3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - org.esigate:esigate-cas 3.1 - org.esigate:esigate-jsf 3.1 - org.esigate:esigate-oscache 3.1 -...
org.esigate:esigate-cas (4.0-beta-1), org.esigate:esigate-jsf (4.0-beta-1) +2 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (4.0-beta-1)
org.esigate:esigate-core MAVEN version 4.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - org.esigate:esigate-cas 4.0-beta-1 - org.esigate:esigate-jsf 4.0-beta-1 - org.esigate:esigate-taglib...
org.esigate:esigate-cas (4.0-beta-2), org.esigate:esigate-jsf (4.0-beta-2) +3 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (4.0-beta-2)
org.esigate:esigate-core MAVEN version 4.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - org.esigate:esigate-cas 4.0-beta-2 - org.esigate:esigate-jsf 4.0-beta-2 - org.esigate:esigate-taglib...
org.esigate:esigate-cas (4.0), org.esigate:esigate-distribution (4.0) +4 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (4.0)
org.esigate:esigate-core MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - org.esigate:esigate-cas 4.0 - org.esigate:esigate-distribution 4.0 - org.esigate:esigate-jsf 4.0 -...
de.cezaryrk.olingo:odata-fit (5.0.1-renamed), org.esigate:esigate-cas (4.4) +5 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (4.4)
org.esigate:esigate-core MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.esigate:esigate-core and may be impacted: - de.cezaryrk.olingo:odata-fit 5.0.1-renamed - org.esigate:esigate-cas 4.4 - org.esigate:esigate-distribution 4.4 -...
org.esigate:esigate-cas (>=5.0-beta-1, <=5.2), org.esigate:esigate-distribution (>=5.0-beta-1, <=5.2) +2 more potentially affected by CVE-2018-1000854 via org.esigate:esigate-core (>=5.0-beta-1, <=5.2)
org.esigate:esigate-core MAVEN version =5.0-beta-1, =5.0-beta-1, =5.0-beta-1, =5.0-beta-1, =5.0-beta-1, =5.2 Source cves: CVE-2018-1000854 Source advisory: OSV:GHSA-HJM9-576Q-399P...
