32 matches found
CVE-2026-54789
modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of...
ROS-20251022-01
Authentication and authorization module for Apache 2.x HTTP server Modauthopenidc vulnerability is related to an information disclosure. Exploitation of the vulnerability allows an attacker acting remotely to disclose protected information...
EUVD-2012-4499
Malware in sbrugna...
EUVD-2023-32293
Malicious code in bioql PyPI...
EUVD-2025-13560
Malicious code in bioql PyPI...
CVE-2025-46591
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-46591
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-46591
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-46591
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-46591
CVE-2025-46591 is linked to Huawei HarmonyOS radios and is described as an out-of-bounds read vulnerability in the authorization module. The issue impacts confidentiality if exploited. Public details across connected sources indicate various vendor advisories and CVE records (NVD, RH, CNVD, CNVD ...
CVE-2025-46591
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
PT-2025-19978 · Huawei · Harmonyos
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to an out-of-bounds data read vulnerability in the authorization module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendation...
CVE-2025-46591: Client-Side Enforcement of Server-Side Security
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
Malicious code in authorization-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e2784539b8d0054bd96f31250937fce75677b82efecd893253293f97b6a585d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in authorization-module
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-7929 Malicious code in authorization-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e2784539b8d0054bd96f31250937fce75677b82efecd893253293f97b6a585d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2020-17525
Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...
CVE-2022-23527 Open Redirect in oidc_validate_redirect_url()
modauthopenidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior to 2.4.12.2 are vulnerable to Open Redirect. When providing a logout parameter to the redirect URI, the existing code in oidcvalidateredirecturl does not properly check fo...
CVE-2021-41135
The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...
CVE-2019-12635 Cisco Content Security Management Appliance Information Disclosure Vulnerability
A vulnerability in the authorization module of Cisco Content Security Management Appliance SMA Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role permission controls...