128 matches found
Astra Linux – Vulnerability in xmltooling
Shibboleth XMLTooling before version 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allowed SSRF through a specially crafted KeyInfo element. This issue has been fixed, for example, in Shibboleth Service Provider 3.4.1.3 on Windows...
SUSE SLES16 Security Update : shibboleth-sp (SUSE-SU-2026:22854-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22854-1 advisory. This update for shibboleth-sp fixes the following issue - CVE-2025-9943: SQL injection in the ID attribute of the SAML response when the...
openSUSE 16: libshibsp-lite12 / libshibsp12 / shibboleth-sp / etc (openSUSE-SU-2026:21418-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21418-1 advisory. This update for shibboleth-sp fixes the following issue - CVE-2025-9943: SQL injection in the ID attribute of the SAML response when the replay cache of...
SUSE-SU-2026:22854-1 Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue - CVE-2025-9943: SQL injection in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394...
OPENSUSE-SU-2026:21418-1 Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue - CVE-2025-9943: SQL injection in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394...
SUSE SLES15 Security Update : shibboleth-sp (SUSE-SU-2026:3123-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3123-1 advisory. This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the...
Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue: CVE-2025-9943: SQL injection in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394. Patch Instructions: To install this SUSE...
SUSE-SU-2026:3123-1 Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394...
SUSE SLES12 Security Update : shibboleth-sp (SUSE-SU-2026:3098-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3098-1 advisory. This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the replay cach...
Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue: CVE-2025-9943: SQL injection in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394. Patch Instructions: To install this SUSE...
SUSE-SU-2026:3098-1 Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394...
CVE-2021-28963
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...
CVE-2021-31826
Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...
EUVD-2021-18701
Malware in sbrugna...
EUVD-2019-8823
Malware in sbrugna...
EUVD-2015-2775
Malware in sbrugna...
EUVD-2017-8026
Malware in sbrugna...
EUVD-2021-15612
Malware in sbrugna...