7296 matches found
Fortinet FortiWeb OS Command Injection
An OS command injection vulnerability in FortiWeb's management interface version 6.3.11 and prior can allow a remote, authenticated attacker to execute arbitrary commands on the system, via the SAML server configuration page. This is an instance of CWE-78: Improper Neutralization of Special...
CVE-2021-36785
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows XSS...
CVE-2021-36786
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys...
CVE-2021-36786
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys...
CVE-2021-36785
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows XSS...
CVE-2021-36786
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys...
Cross site scripting
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows XSS...
CVE-2021-36786
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys...
CVE-2021-36786
CVE-2021-36786 concerns the miniorange_saml (Miniorange Saml) extension for TYPO3, prior to version 1.4.3. The issue is an information disclosure vulnerability that allows exposure of API credentials and private keys due to inadequate handling/encoding, as described in multiple connected sources ...
CVE-2021-36785
CVE-2021-36785 : The Miniorange SAML extension for TYPO3 (miniorange_saml) before version 1.4.3 is affected by a cross-site scripting (XSS) vulnerability due to improper encoding of user input in HTML context. The issue is documented in TYPO3’s advisory (typo3-ext-sa-2021-011) and multiple CVE re...
PT-2021-21354
Name of the Vulnerable Software and Affected Versions miniorange saml extension versions prior to 1.4.3 Description The issue allows sensitive data exposure of API credentials and private keys. Recommendations For miniorange saml extension versions prior to 1.4.3, update to version 1.4.3 or later...
PT-2021-21353
Name of the Vulnerable Software and Affected Versions miniorange saml extension for TYPO3 version 1.4.2 and earlier Description The issue allows for XSS. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents whe...
CVE-2021-36785: Improper Neutralization of Input During Web Page Generation
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows XSS...
CVE-2021-3046
An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. This issue impacts: PAN-OS 8.1...
CVE-2021-3046
An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. This issue impacts: PAN-OS 8.1...
Authentication flaw
An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. This issue impacts: PAN-OS 8.1...
CVE-2021-3046 PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal
An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. This issue impacts: PAN-OS 8.1...
CVE-2021-3046
CVE-2021-3046 is an improper authentication vulnerability in Palo Alto Networks PAN-OS that allows a SAML-authenticated attacker to impersonate any user in the GlobalProtect Portal and Gateway when SAML is enabled. Affected versions are PAN-OS 8.1 before 8.1.19; 9.0 before 9.0.14; 9.1 before 9.1....
CVE-2021-3046
An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. This issue impacts: PAN-OS 8.1...
PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal
An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. This issue impacts: PAN-OS 8.1...