663 matches found
UBUNTU-CVE-2025-68121
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the...
CVE-2026-1554
XML Injection aka Blind XPath Injection vulnerability in Drupal Central Authentication System CAS Server allows Privilege Escalation.This issue affects Central Authentication System CAS Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2...
CVE-2026-1554 Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007
XML Injection aka Blind XPath Injection vulnerability in Drupal Central Authentication System CAS Server allows Privilege Escalation.This issue affects Central Authentication System CAS Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2...
CVE-2026-1554 Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007
XML Injection aka Blind XPath Injection vulnerability in Drupal Central Authentication System CAS Server allows Privilege Escalation.This issue affects Central Authentication System CAS Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2...
EUVD-2026-5352
XML Injection aka Blind XPath Injection vulnerability in Drupal Central Authentication System CAS Server allows Privilege Escalation.This issue affects Central Authentication System CAS Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: step-issuer, cert-manager-openshift-routes-fips, aws-privateca-issuer, cert-manager-cmctl-fips, cert-manager-csi-driver-fips, gitlab-operator-fips, cert-manager-google-cas-issuer, mariadb-operator-fips, aws-privateca-issuer-fips, percona-xtradb-cluster-operator-fips,...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: step-issuer, cert-manager-openshift-routes-fips, aws-privateca-issuer, cert-manager-cmctl-fips, cert-manager-csi-driver-fips, gitlab-operator-fips, cert-manager-google-cas-issuer, mariadb-operator-fips, aws-privateca-issuer-fips, percona-xtradb-cluster-operator-fips,...
WordPress CAS <= 1.0.0 - Unauthenticated SSRF vulnerability
Unauthenticated SSRF vulnerability discovered by Aly Khaled Aly Abd Al-aal in WordPress Theme Cas versions = 1.0.0...
PT-2026-4088
Name of the Vulnerable Software and Affected Versions Casey Bisson wpCAS versions through 1.07 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows for the injection of...
CVE-2021-47875
GeoGebra CAS Calculator 6.0.631.0 contains a denial of service vulnerability that allows attackers to crash the application by generating a large buffer overflow. Attackers can create a payload with 8000 repeated characters and paste it into the calculator's input field to trigger an application...
GeoGebra CAS Calculator security vulnerability
GeoGebra CAS Calculator is a symbolic calculation calculator developed by the American company GeoGebra. Version 6.0.631.0 of the GeoGebra CAS Calculator has a security vulnerability; this vulnerability stems from a buffer overflow in the input fields, which may lead to the application crashing...
PT-2026-3827
GeoGebra CAS Calculator 6.0.631.0 contains a denial of service vulnerability that allows attackers to crash the application by generating a large buffer overflow. Attackers can create a payload with 8000 repeated characters and paste it into the calculator's input field to trigger an application...
CVE-2018-1000188
A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL...
CVE-2022-35248
A improper authentication vulnerability exists in Rocket.Chat...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-992937)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992937 advisory. In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of casinitone cassaturnfirmwareinit allocat...
HSEC-2023-0006 x509-validation does not enforce pathLenConstraint
x509-validation does not enforce pathLenConstraint x509-validation prior to version 1.4.8 did not enforce the pathLenConstraint value. Constrained CAs could accidentally or deliberately issue CAs below the maximum depth and x509-validation would accept certificates issued by the unauthorised...
EUVD-2017-1388
Malware in sbrugna...
EUVD-2020-6020
Malware in sbrugna...