Lucene search
+L

99 matches found

Fedora
Fedora
added 2026/02/10 1:34 a.m.12 views

[SECURITY] Fedora 43 Update: rust-routinator-0.14.2-4.fc43

An RPKI relying party software...

7.5CVSS5.5AI score0.00461EPSS
SaveExploits1
Yubico
Yubico
added 2026/02/10 12:00 a.m.23 views

YSA-2026-02 | Yubico

A security update is available for the Yubico open-source software project webauthn-server-core to resolve a user impersonation vulnerability. No Yubico hardware is affected. In specific implementations, an attacker that has an existing account with a relying party RP can authenticate as a target...

7.5CVSS5.8AI score0.00308EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/15 5:22 p.m.10 views

CVE-2026-22694

AliasVault is a privacy-first password manager with built-in email aliasing. AliasVault Android versions 0.24.0 through 0.25.2 contained an issue in how passkey requests from Android apps were validated. Under certain local conditions, a malicious app could attempt to obtain a passkey response fo...

6.1CVSS6.4AI score0.00117EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/14 5:16 p.m.16 views

CVE-2026-22694

AliasVault is a privacy-first password manager with built-in email aliasing. AliasVault Android versions 0.24.0 through 0.25.2 contained an issue in how passkey requests from Android apps were validated. Under certain local conditions, a malicious app could attempt to obtain a passkey response fo...

6.1CVSS0.00117EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/14 12:00 a.m.24 views

PT-2026-2917

AliasVault is a privacy-first password manager with built-in email aliasing. AliasVault Android versions 0.24.0 through 0.25.2 contained an issue in how passkey requests from Android apps were validated. Under certain local conditions, a malicious app could attempt to obtain a passkey response fo...

6.1CVSS6.4AI score0.00117EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/09/11 12:16 a.m.23 views

CVE-2025-57540

A stored cross-site scripting XSS vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment PVE 8.4. Authenticated users can inject JavaScript code that is later executed in the browsers of users who view the configuration page,...

5.4CVSS5.8AI score0.00286EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/09 5:16 p.m.44 views

CVE-2025-57540

A stored cross-site scripting XSS vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment PVE 8.4. Authenticated users can inject JavaScript code that is later executed in the browsers of users who view the configuration page,...

5.4CVSS0.00286EPSS
SaveExploits1References3
OSV
OSV
added 2025/09/09 5:16 p.m.10 views

CVE-2025-57540

A stored cross-site scripting XSS vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment PVE 8.4. Authenticated users can inject JavaScript code that is later executed in the browsers of users who view the configuration page,...

5.4CVSS5.7AI score0.00286EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/09/09 12:00 a.m.25 views

CVE-2025-57540

A stored cross-site scripting XSS vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment PVE 8.4. Authenticated users can inject JavaScript code that is later executed in the browsers of users who view the configuration page,...

0.00286EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.14 views

Proxmox Virtual Environment 安全漏洞

Proxmox Virtual Environment Proxmox VE is an open source server virtualization environment Linux distribution from Proxmox. A security vulnerability exists in Proxmox Virtual Environment version 8.4, which stems from a stored cross-site scripting vulnerability in the WebAuthn Relying Party field...

5.4CVSS5.9AI score0.00286EPSS
SaveExploits1References4
Fedora
Fedora
added 2025/08/28 1:09 a.m.17 views

[SECURITY] Fedora 41 Update: mod_auth_openidc-2.4.17.2-1.fc41

This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server...

8.2CVSS7AI score0.00571EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2019-15941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request...

9.8CVSS7.2AI score0.02197EPSS
SaveExploits0References2
Debian
Debian
added 2025/02/23 11:22 p.m.36 views

[SECURITY] [DLA 4066-1] fort-validator security update

Debian LTS Advisory DLA-4066-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert February 24, 2025 https://wiki.debian.org/LTS Package : fort-validator Version : 1.5.3-1deb11u2 CVE ID : CVE-2024-45234 CVE-2024-45235 CVE-2024-45236 CVE-2024-45237 CVE-2024-45238...

9.8CVSS6.1AI score0.00481EPSS
SaveExploits0
Fedora
Fedora
added 2025/02/09 1:32 a.m.13 views

[SECURITY] Fedora 40 Update: rust-routinator-0.14.1-2.fc40

An RPKI relying party software...

7.5CVSS7.1AI score0.00476EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2024/11/12 8:48 a.m.40 views

Moderate: Red Hat Security Advisory: mod_auth_openidc security update

An update for modauthopenidc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS6.8AI score0.01261EPSS
SaveExploits1References4
Veracode
Veracode
added 2024/08/27 8:22 p.m.25 views

NULL Pointer Dereference

Fort is vulnerable to NULL Pointer Dereference. The vulnerability is caused due to a malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field which For...

7.5CVSS6.7AI score0.00305EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2024/06/07 12:00 a.m.12 views

Fedora: Security Advisory for rust-routinator-ui (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2024/06/02 3:39 a.m.28 views

[SECURITY] Fedora 39 Update: rust-routinator-ui-0.3.4-2.fc39

Web UI for Routinator, a RPKI relying party software...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2024/06/02 3:39 a.m.14 views

[SECURITY] Fedora 39 Update: rust-routinator-0.13.2-2.fc39

An RPKI relying party software...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2024/05/27 12:00 a.m.12 views

Fedora: Security Advisory for rust-routinator (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder