535 matches found
Design/Logic Flaw
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...
CVE-2021-28963
CVE-2021-28963 affects Shibboleth Service Provider prior to 3.2.1, where template generation uses attacker-controlled parameters, enabling content injection. Multiple connected sources (Red Hat, Ubuntu USN-4925-1, Debian/OSV entries) corroborate the vulnerability and indicate affected deployments...
CVE-2021-28963
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...
CVE-2021-28963
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...
Shibboleth 注入漏洞
Shibboleth is an open source SAML protocol web single sign-on system for Windows based platforms from Shibboleth, UK. A security vulnerability exists in Shibboleth Service Provider before 3.2.1, which stems from template generation using attacker-controlled parameters...
Debian: Security Advisory (DSA-4872-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-2599-1 shibboleth-sp2 - security update
Bulletin has no description...
Debian DLA-2599-1 : shibboleth-sp2 security update
Toni Huttunen discovered that the Shibboleth service provider's template engine used to render error pages could be abused for phishing attacks. For additional information please refer to the upstream advisory at https://shibboleth.net/community/advisories/secadv20210317.txt For Debian 9 stretch,...
Debian DSA-4872-1 : shibboleth-sp - security update
Toni Huttunen discovered that the Shibboleth service provider's template engine used to render error pages could be abused for phishing attacks. For additional information please refer to the upstream advisory at https://shibboleth.net/community/advisories/secadv20210317.txt C Tenable Network...
Debian: Security Advisory (DLA-2599-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2599-1] shibboleth-sp2 security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2599-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 19, 2021 https://wiki.debian.org/LTS -...
[SECURITY] [DSA 4872-1] shibboleth-sp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4872-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2021 https://www.debian.org/security/faq -...
DSA-4872-1 shibboleth-sp - security update
Bulletin has no description...
The vulnerability of the Shibboleth authentication technology in the virtual learning environment Moodle allows a perpetrator to execute arbitrary code.
The vulnerability of the Shibboleth authentication technology in the virtual learning environment Moodle is related to incorrect code generation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to generate arbitrary codes...
Security Bulletin: IBM Resilient SOAR is using opensaml-2.6.4.jar that could be vulnerable to bypass security restrictions (CVE-2015-1796)
Summary opensaml-2.6.4.jar vulnerable to CVE-2015-1796, Shibboleth Identity Provider could allow a remote attacker to bypass security restrictions, caused by an error in the PKIX trust component. An attacker could exploit this vulnerability using a certificate issued by the shibmd:KeyAuthority...
Moodle code injection vulnerability (CNVD-2021-07533)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A code injection vulnerability exists in Moodle versions 3.10.1, 3.9.4, 3.8.7 and 3.5.16, which originates from an arbitrary execution ...
Remote Code Execution (RCE)
moodle/moodle is vulnerable to remote code execution. The vulnerability exists because a malicious admin user can inject and execute a malicious script via a PHP include used during Shibboleth authentication...
CVE-2021-20187
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication...
CVE-2021-20187
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication...
CVE-2021-20187
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication...