Azure Entra ID Identity Provider Detected

This is an informational notice that the scanner was able to detect an application using Azure Entra ID. No source data...

Auth0 Identity Provider Detected

This is an informational notice that the scanner was able to detect an application using Auth0 Identity Provider. No source data...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Identity Services Engine ISE web interface relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

openSUSE Security Advisory (SUSE-SU-2025:0750-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the application software interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to upload files and gain access to read, modify, or delete data.

The vulnerability of the application programming interface of the Cisco Identity Services Engine ISE management platform is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to upload files and gain read,...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute cross-site scripting (XSS) attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform for network policies is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks...

OpenID Connect Core 安全漏洞

OpenID Connect Core is a simple identity layer on top of the OAuth 2.0 protocol from the OpenID Foundation. A security vulnerability exists in OpenID Connect Core version 1.0. An attacker can exploit this vulnerability to impersonate a client using a private key JWT...

The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) platform allows a perpetrator to load files into any location within the operating system of the affected device.

The vulnerability of the application software interface of the Cisco Identity Services Engine ISE management platform is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to load files into any location within...

The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to gain read, modify, or delete access to data.

The vulnerability of the application programming interface of the Cisco Identity Services Engine ISE management platform relates to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to da...

CVE-2025-27414

A flaw was found in MinIO. An incorrect evaluation of the SSH key used in an SFTP connection when using LDAP as an external identity provider with a user with no sshPublicKey property allows an attacker to perform any FTP operations like reading, writing, deleting and listing objects, resulting i...

CVE-2025-1801

A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition requests against the proxy. This issue potentially allows a less privileged user to obtain the JWT of a greater privileged user, enabling the...

CVE-2025-1564

The CVE-2025-1564 entry concerns SetSail Membership (WordPress)

CVE-2025-1671

CVE-2025-1671 concerns the Academist Membership plugin for WordPress (versions ≤ 1.1.6). The root cause is the function academist_membership_check_facebook_user() not properly verifying a user’s identity before authentication, enabling an unauthenticated attacker to log in as any user, including ...

CVE-2024-13373

CVE-2024-13373 affects Exertio Framework plugin for WordPress (all versions up to 1.3.1). The issue enables unauthenticated users to perform an arbitrary password update via fl_forgot_pass_new(), leading to privilege escalation and potential account takeover (including administrators). Mitigation...

SUSE SLES15 / openSUSE 15 Security Update : python-azure-identity (SUSE-SU-2025:0750-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0750-1 advisory. - CVE-2024-35255: race condition leading to privilege escalation and unauthorized access to sensitive information in Azure...

WordPress plugin Alloggio Membership 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Security update for python-azure-identity

This update for python-azure-identity fixes the following issues: CVE-2024-35255: race condition leading to privilege escalation and unauthorized access to sensitive information in Azure Identity libraries bsc1230100. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:0750-1 Security update for python-azure-identity

This update for python-azure-identity fixes the following issues: - CVE-2024-35255: race condition leading to privilege escalation and unauthorized access to sensitive information in Azure Identity libraries bsc1230100...

SUSE CVE-2025-23389

A Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML Authentication on first login. This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3...

PT-2025-9136 · Minio · Minio

Name of the Vulnerable Software and Affected Versions: MinIO versions RELEASE.2024-06-06T09-36-42Z through RELEASE.2025-02-28T09-55-16Z Description: A bug in MinIO's evaluation of the trust of the SSH key used in an SFTP connection allows authentication bypass and unauthorized data access. This...