7551 matches found
CVE-2025-30168 Parse Server has an OAuth login vulnerability
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...
Malicious code in io.github.leetcrunch:scribejava-core (Maven)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8dd884cda209e50c2bd5185172f3c25968cb972cbd19234779b43f4f855f2d26 A malicious Maven Java package a typosquatting a legitimate OAuth Maven package. The malicious package collects and exfils OAuth credentia...
MAL-2025-2552 Malicious code in io.github.leetcrunch:scribejava-core (Maven)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8dd884cda209e50c2bd5185172f3c25968cb972cbd19234779b43f4f855f2d26 A malicious Maven Java package a typosquatting a legitimate OAuth Maven package. The malicious package collects and exfils OAuth credentia...
jenkins.plugins.htmlaudio:html-audio-notifier (0.1), org.jenkins-ci.main:jenkins-test-harness (1.431) +14 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.431)
org.jenkins-ci.main:jenkins-core MAVEN version 1.431 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jenkins.plugins.htmlaudio:html-audio-notifier 0.1 - org.jenkins-ci.main:jenkins-test-harness...
Linux Distros Unpatched Vulnerability : CVE-2025-22376
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is...
CVE-2025-27672
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016...
CVE-2025-27672
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016...
CVE-2025-27371
In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 910...
CVE-2025-27672: Improper Authentication
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016...
CVE-2025-27672
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016...
CVE-2025-27672
Vasion Print (formerly PrinterLogic ) is vulnerable to an OAUTH Security Bypass (OVE-20230524-0016) in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . The vulnerability allows for improper authentication within the SaaS-based, cloud-hosted application used for managing a...
PT-2025-9779
Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 Description The issue allows for OAUTH security bypass. Recommendations For versions prior to Virtual Appliance Host 22.0.843 Applicatio...
CVE-2025-27371
In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 910...
CVE-2025-27371
In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 910...
Malicious code in meli-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1887 Malicious code in meli-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in iberia-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1842 Malicious code in iberia-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...