1828 matches found
CVE-2025-9485 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
WordPress plugin OAuth Single Sign On – SSO (OAuth Client) 数据伪造问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A data forgery issue...
RockyLinux 10 : opentelemetry-collector (RLSA-2025:7479)
The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2025:7479 advisory. go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...
EUVD-2024-52316
Malicious code in bioql PyPI...
EUVD-2025-30532
Malicious code in bioql PyPI...
EUVD-2023-29918
Malicious code in bioql PyPI...
EUVD-2021-8681
Malicious code in bioql PyPI...
EUVD-2025-13907
Malicious code in bioql PyPI...
EUVD-2023-2883
Malicious code in bioql PyPI...
EUVD-2025-21176
Malicious code in bioql PyPI...
EUVD-2023-38201
Malicious code in bioql PyPI...
EUVD-2025-24930
Malicious code in bioql PyPI...
EUVD-2025-32091
Malicious code in bioql PyPI...
EUVD-2023-34278
Malicious code in bioql PyPI...
EUVD-2025-29910
Malicious code in bioql PyPI...
EUVD-2025-23454
Malicious code in bioql PyPI...
EUVD-2024-3127
Malicious code in bioql PyPI...
EUVD-2024-3440
Malicious code in bioql PyPI...