CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

59 matches found

OSV•added 2023/12/19 7:8 p.m.•9 views

MGASA-2023-0352 Updated fusiondirectory packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Fusiondirectory 1.3 suffers from Improper Session Handling. CVE-2022-36179 Fusiondirectory 1.3 is vulnerable to Cross Site Scripting XSS via /fusiondirectory/index.php?message=injection,...

9.8CVSS8.9AI score0.00932EPSS

Exploits2References3

Mageia•added 2023/12/19 7:8 p.m.•38 views

Updated fusiondirectory packages fix security vulnerabilities

9.8CVSS9.1AI score0.00932EPSS

Exploits2References2

Veracode•added 2023/08/06 10:2 p.m.•28 views

Improper Session Handling

fusiondirectory is vulnerable to Improper Session Handling. The vulnerability exists due to lack of validations in fusiondirectory package which allows an attacker to reuse old session credentials or session IDs for authorization...

9.8CVSS6.8AI score0.00932EPSS

Exploits1References4Affected Software1

OpenVAS•added 2023/07/10 12:0 a.m.•18 views

Debian: Security Advisory (DLA-3487-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.00932EPSS

Exploits2References5

Debian•added 2023/07/08 2:7 p.m.•124 views

[SECURITY] [DLA 3487-1] fusiondirectory security update and rebuild for php-cas

Debian LTS Advisory DLA-3487-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA Tobias Frost July 08, 2023 https://wiki.debian.org/LTS Package : fusiondirectory Version : 1.2.3-4+deb10u2 CVE ID : CVE-2022-36179 CVE-2022-36180 Debian Bug : A potential Cross Site Scripti...

9.8CVSS6.8AI score0.01064EPSS

Exploits2

Tenable Nessus•added 2023/07/08 12:0 a.m.•26 views

Debian dla-3487 : fusiondirectory - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3487 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3487-1 [email protected]...

9.8CVSS7.4AI score0.01064EPSS

Exploits2References8

OSV•added 2023/07/08 12:0 a.m.•21 views

DLA-3487-1 fusiondirectory - security update

Bulletin has no description...

9.8CVSS9.3AI score0.00932EPSS

Exploits2

CNVD•added 2022/11/24 12:0 a.m.•57 views

Unspecified vulnerability in FusionDIrectory

FusionDIrectory is an application of FusionDIrectory open source. Used to ensure that the user's identity management security. A security vulnerability exists in FusionDIrectory version 1.3, which stems from a failure to properly handle sessions and can be exploited by an attacker to potentially...

9.8CVSS9.2AI score0.00932EPSS

Exploits1References1

CNVD•added 2022/11/24 12:0 a.m.•75 views

Fusiondirectory Cross-Site Scripting Vulnerability

FusionDIrectory is a FusionDIrectory open source application. Used to ensure that the user's identity management security. A cross-site scripting vulnerability exists in Fusiondirectory version 1.3. The vulnerability stems from a lack of effective filtering and escaping of user-supplied data, whi...

9.6CVSS8.7AI score0.00882EPSS

Exploits1References1

NVD•added 2022/11/22 1:15 a.m.•12 views

CVE-2022-36180

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting XSS via /fusiondirectory/index.php?message=injection, /fusiondirectory/index.php?message=invalidparameter&plug=Injection, /fusiondirectory/index.php?signout=1&message=injection&plug=106...

9.6CVSS0.00882EPSS

Exploits1References2

OSV•added 2022/11/22 1:15 a.m.•6 views

CVE-2022-36180

9.6CVSS8.8AI score

Exploits0References3

OSV•added 2022/11/22 1:15 a.m.•0 views

DEBIAN-CVE-2022-36180

9.6CVSS8.3AI score0.00882EPSS

Exploits1References1

OSV•added 2022/11/22 1:15 a.m.•7 views

CVE-2022-36179