Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

3342 matches found

Veracode
Veracode•added 2021/08/06 8:24 a.m.•32 views

Cross-site Scripting (XSS)

libapache2-mod-auth-openidc, sidis vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the system functioning as an OpenID Connect Relying Party when using OIDCPreservePost On...

6.1CVSS6.8AI score0.0151EPSS
SaveExploits0References11Affected Software1
osv_cve
osv_cve•added 2021/07/26 5:15 p.m.•47 views

CVE-2021-32791

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, the AES GCM encryption in modauthopenidc uses a static IV and...

5.9CVSS6.6AI score
SaveExploits0References7
osv_cve
osv_cve•added 2021/07/26 5:15 p.m.•38 views

CVE-2021-32792

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using OIDCPreservePost ...

6.1CVSS5.9AI score
SaveExploits0References8
NVD
NVD•added 2021/07/26 5:15 p.m.•28 views

CVE-2021-32791

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, the AES GCM encryption in modauthopenidc uses a static IV and...

5.9CVSS0.01503EPSS
SaveExploits0References7
osv_azl
osv_azl•added 2021/07/26 5:15 p.m.•21 views

AZL-6482 CVE-2021-32792 affecting package httpd for versions less than 2.4.52-1

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using OIDCPreservePost ...

6.1CVSS6.7AI score0.0151EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2021/07/26 5:15 p.m.•12 views

DEBIAN-CVE-2021-32791

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, the AES GCM encryption in modauthopenidc uses a static IV and...

5.9CVSS6.4AI score0.01503EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2021/07/26 5:15 p.m.•11 views

UBUNTU-CVE-2021-32792

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using OIDCPreservePost ...

6.1CVSS6.7AI score0.0151EPSS
SaveExploits0References6
attackerkb
attackerkb•added 2021/07/26 5:15 p.m.•16 views

CVE-2021-32792

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using OIDCPreservePost ...

6.1CVSS6.7AI score0.0151EPSS
SaveExploits0References11Affected Software1
Prion
Prion•added 2021/07/26 5:15 p.m.•29 views

Design/Logic Flaw

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using OIDCPreservePost ...

4.3CVSS6AI score0.0151EPSS
SaveExploits0References8Affected Software2
CNNVD
CNNVD•added 2021/07/26 12:00 a.m.•8 views

mod_auth_openidc 跨站脚本漏洞

modauthopenidc is a software application. It is an authentication/authorization module for the Apache 2.x HTTP server that is used as an OpenID Connect dependency to authenticate users against the OpenID Connect provider. A cross-site scripting vulnerability exists in Zmartzone modauthopenidc,...

6.1CVSS6.5AI score0.0151EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/07/26 12:00 a.m.•6 views

CVE-2021-32792: Improper Neutralization of Input During Web Page Generation

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using OIDCPreservePost ...

6.1CVSS6.7AI score0.0151EPSS
SaveExploits0References3
CVE
CVE•added 2021/07/26 12:00 a.m.•359 views

CVE-2021-32791

mod_auth_openidc is an Apache 2.x authentication module that, before version 2.4.9, used a static IV and AAD for AES-GCM encryption, causing nonce reuse and potential cryptographic issues. The issue is fixed in 2.4.9 and later by using dynamic IV/AAD values via cjose AES routines. Affected system...

5.9CVSS6AI score0.01503EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist•added 2021/07/26 12:00 a.m.•63 views

CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, the AES GCM encryption in modauthopenidc uses a static IV and...

5.9CVSS6.4AI score0.01503EPSS
SaveExploits0References7
Debian CVE
Debian CVE•added 2021/07/26 12:00 a.m.•69 views

CVE-2021-32791

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, the AES GCM encryption in modauthopenidc uses a static IV and...

5.9CVSS6.1AI score0.01503EPSS
SaveExploits0
Debian CVE
Debian CVE•added 2021/07/26 12:00 a.m.•40 views

CVE-2021-32792

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using OIDCPreservePost ...

6.1CVSS6.7AI score0.0151EPSS
SaveExploits0
osv_cve
osv_cve•added 2021/07/22 10:15 p.m.•37 views

CVE-2021-32786

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9, oidcvalidateredirecturl does not parse URLs the same way as most browsers...

6.1CVSS6.5AI score
SaveExploits0References9
NVD
NVD•added 2021/07/22 10:15 p.m.•30 views

CVE-2021-32785

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. When modauthopenidc versions prior to 2.4.9 are configured to use an unencrypted Redis cache...

7.5CVSS0.02731EPSS
SaveExploits0References6
osv_azl
osv_azl•added 2021/07/22 10:15 p.m.•15 views

AZL-6480 CVE-2021-32786 affecting package httpd for versions less than 2.4.52-1

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9, oidcvalidateredirecturl does not parse URLs the same way as most browsers...

6.1CVSS6.4AI score0.02364EPSS
SaveExploits1References1
NVD
NVD•added 2021/07/22 10:15 p.m.•28 views

CVE-2021-32786

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9, oidcvalidateredirecturl does not parse URLs the same way as most browsers...

6.1CVSS0.02364EPSS
SaveExploits1References9
Prion
Prion•added 2021/07/22 10:15 p.m.•26 views

Open redirect

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9, oidcvalidateredirecturl does not parse URLs the same way as most browsers...

5.8CVSS6.2AI score0.02364EPSS
SaveExploits1References9Affected Software2
Rows per page
Query Builder