Lucene search
+L

14 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2018-6520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL. CVE-2018-6520 Note that...

6.1CVSS6.4AI score0.00851EPSS
SaveExploits0References2
NVD
NVD
•added 2018/02/02 1:29 a.m.•52 views

CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

6.1CVSS6.2AI score0.00851EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/02 1:29 a.m.•20 views

Open redirect

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

5.8CVSS6.2AI score0.00851EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2018/02/02 1:29 a.m.•26 views

CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

6.1CVSS6.4AI score0.00851EPSS
SaveExploits0References2
OSV
OSV
•added 2018/02/02 1:29 a.m.•30 views

CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

6.1CVSS7.1AI score
SaveExploits0References1
OSV
OSV
•added 2018/02/02 1:29 a.m.•11 views

DEBIAN-CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

6.1CVSS7AI score0.00851EPSS
SaveExploits0References1
OSV
OSV
•added 2018/02/02 1:29 a.m.•12 views

UBUNTU-CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

6.1CVSS6.4AI score0.00851EPSS
SaveExploits0References3
CVE
CVE
•added 2018/02/02 1:00 a.m.•77 views

CVE-2018-6520

SimpleSAMLphp before 1.15.2 is vulnerable to an open redirect protection bypass through crafted authority data in a URL. The underlying issue is in the URL handling that allows bypass of redirect protections, enabling potential open redirects. Affected component: SimpleSAMLphp (prior to 1.15.2). ...

6.1CVSS6.1AI score0.00851EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2018/02/02 1:00 a.m.•1 views

CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

6.1CVSS0.00851EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2018/02/02 1:00 a.m.•78 views

CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

6.1CVSS6.2AI score0.00851EPSS
SaveExploits0
CNVD
CNVD
•added 2018/02/02 12:00 a.m.•13 views

SimpleSAMLphp Open Redirect Protection Bypass Vulnerability

SimpleSAMLphp is a program written in native PHP to handle authentication. An open redirection protection bypass vulnerability exists in SimpleSAMLphp before 1.15.2. A remote attacker can bypass the open redirection protection mechanism via specially crafted authority data in the URL...

6.1CVSS7.1AI score0.00851EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/02 12:00 a.m.•3 views

CVE-2018-6520: URL Redirection to Untrusted Site

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

6.1CVSS6.4AI score0.00851EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/02/02 12:00 a.m.•1 views

PT-2018-17608

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.15.2 Description The issue allows remote attackers to bypass an open redirect protection mechanism. This can be achieved by using crafted authority data in a URL. Recommendations For versions prior to 1.15.2,...

6.1CVSS0.00851EPSS
SaveExploits0References13
OSV
OSV
•added 2016/04/18 12:59 a.m.•13 views

CVE-2016-2424

server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mismanages certain authority data, which allows attackers to cause a denial of service reboot loop via a crafted application, aka internal bug...

5.5CVSS7.3AI score0.00358EPSS
SaveExploits0References2
Rows per page
Query Builder