9975 matches found
IBM JDK Java Denial of Service Vulnerability
IBM Java is a JRE runtime environment. An unspecified security vulnerability in the IBM JDK Java Virtual Machine's Socket Extension Provider for handling TLS and SSL connections allows attackers to conduct denial-of-service attacks by exploiting the vulnerability...
eBay Magento online business systems to find vulnerabilities-vulnerability warning-the black bar safety net
The owner of the site constantly urges the art to fix the“Shoplift”this is a big vulnerability. Including eBay online retail giant's open-source e-Commerce platform Magento included, there are other thousands of e-Commerce websites are put up with their site serious vulnerability, an attacker can...
Shibboleth Service Provider DoS
Crash on parsing SAML message...
PicketLink: SP does not take Audience condition of a SAML assertion into account
A flaw was found in the way PicketLink's Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victim's account via PicketLink...
PicketLink: Lack of validation for the Destination attribute in a Response element in a SAML assertion
A flaw was found in the way PicketLink's Service Provider SP and Identity Provider IdP handled certain requests. The SP and IdP in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in the SAML assertion matches the location from which the message was...
PicketLink: SP does not take Audience condition of a SAML assertion into account
A flaw was found in the way PicketLink's Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victim's account via PicketLink...
RESTeasy: External entities expanded by DocumentProvider
It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessibl...
PicketLink: SP does not take Audience condition of a SAML assertion into account
A flaw was found in the way PicketLink's Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victim's account via PicketLink...
PicketLink: Lack of validation for the Destination attribute in a Response element in a SAML assertion
A flaw was found in the way PicketLink's Service Provider SP and Identity Provider IdP handled certain requests. The SP and IdP in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in the SAML assertion matches the location from which the message was...
MGASA-2015-0148 Updated shibboleth-sp packages fix CVE-2015-2684
Updated shibboleth-sp package fixes security vulnerability: A denial of service vulnerability was found in the Shibboleth Service Provider. When processing certain malformed SAML message generated by an authenticated attacker, the daemon could crash CVE-2015-2684...
Updated shibboleth-sp packages fix CVE-2015-2684
Updated shibboleth-sp package fixes security vulnerability: A denial of service vulnerability was found in the Shibboleth Service Provider. When processing certain malformed SAML message generated by an authenticated attacker, the daemon could crash CVE-2015-2684...
[BSA-103] Security Update for shibboleth-sp
Matthew Vernon uploaded new packages for shibboleth-sp which fixed the following security problems: CVE-2015-2684 A denial of service vulnerability was found in the Shibboleth a federated identity framework Service Provider. When processing certain malformed SAML messages generated by an...
CVE-2015-2165
Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...
Shibboleth Service Provider Denial of Service Vulnerability
Shibboleth is the British Shibboleth Group of a set of open source based on the SAML protocol of the Web single sign-on system . Shibboleth Service Provider SP is one of the service provider . A security vulnerability exists in Shibboleth SP versions prior to 2.5.4. The vulnerability can be...
CVE-2015-2684
Shibboleth Service Provider SP before 2.5.4 allows remote authenticated users to cause a denial of service crash via a crafted SAML message...
Code injection
Shibboleth Service Provider SP before 2.5.4 allows remote authenticated users to cause a denial of service crash via a crafted SAML message...
CVE-2015-2684
Shibboleth Service Provider SP before 2.5.4 allows remote authenticated users to cause a denial of service crash via a crafted SAML message...
UBUNTU-CVE-2015-2684
Shibboleth Service Provider SP before 2.5.4 allows remote authenticated users to cause a denial of service crash via a crafted SAML message...
