Lucene search
+L

463 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2014-7117

Malware in sbrugna...

3.5CVSS6.4AI score0.01067EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2017-2513

Malware in sbrugna...

8.1CVSS7.1AI score0.02625EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2019-15484

Malware in sbrugna...

6.1CVSS6.3AI score0.01099EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-53133

Malicious code in bioql PyPI...

6.1CVSS5.4AI score0.00547EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-26407

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00295EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-26483

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00728EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2023-22320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22...

7.5CVSS7AI score0.00728EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2017-10873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenAM Open Source Edition allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability...

8.1CVSS7.1AI score0.02625EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/04 2:28 a.m.•11 views

CVE-2025-8662

OpenAM OpenAM Consortium Edition contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1...

4.3CVSS6.9AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/02 3:15 a.m.•18 views

CVE-2025-8662

OpenAM OpenAM Consortium Edition contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1...

4.3CVSS0.00295EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/02 3:15 a.m.•9 views

CVE-2025-8662

OpenAM OpenAM Consortium Edition contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1...

4.3CVSS7AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/02 2:06 a.m.•17 views

CVE-2025-8662

OpenAM OpenAM Consortium Edition contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1...

2.3CVSS0.00295EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/02 2:06 a.m.•8 views

CVE-2025-8662

OpenAM OpenAM Consortium Edition contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1...

2.3CVSS6.4AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•2 views

CVE-2025-8662: Improper Input Validation

OpenAM OpenAM Consortium Edition contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1...

4.3CVSS5.8AI score0.00295EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/02 12:00 a.m.•12 views

PT-2025-35534

Name of the Vulnerable Software and Affected Versions: OpenAM versions 14.0.0 through 14.0.1 Description: OpenAM OpenAM Consortium Edition may malfunction as a SAML Identity Provider IdP due to a tampered request. Recommendations: At the moment, there is no information about a newer version that...

4.3CVSS6.2AI score0.00295EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/09/02 12:00 a.m.•12 views

OpenAM 安全漏洞

OpenAM is an all-in-one access management solution organized by the OpenAM Consortium. It provides authentication, authorization, delegation and federation capabilities. A security vulnerability exists in OpenAM versions 14.0.0 through 14.0.1, which stems from a tampering request that could resul...

4.3CVSS6.7AI score0.00295EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 2025/07/07 12:00 a.m.•136 views

📄 OpenAM Authentication Bypass

OpenAM versions prior to 14.6.6 proof of concept exploit. / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ || || / // || / / / Name: watchtowr-vs-openamauth-impersonation2022-06-16.py Author: Aliz Hammond import json import re import textwrap import...

5.3CVSS7.2AI score0.03199EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:51 a.m.•5 views

CVE-2023-22320

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

7.5CVSS6.8AI score0.00728EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:13 p.m.•9 views

CVE-2022-34298

The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...

5.3CVSS6.9AI score0.03199EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:35 p.m.•18 views

CVE-2021-29156

ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key...

7.5CVSS7.4AI score0.76846EPSS
SaveExploits5References1
Rows per page
Query Builder