51 matches found
CVE-2025-54369 Node-SAML SAML Authentication Bypass
Node-SAML is a SAML library not dependent on any frameworks that runs in Node. In versions 5.0.1 and below, Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify...
9.3CVSS0.00548EPSS
SaveExploits0References3
CVE-2025-50072
...
4CVSS7.6AI score0.00157EPSS
SaveExploits0References1
CVE-2025-21558
...
5.4CVSS5.8AI score0.00263EPSS
SaveExploits0References1
CVE-2025-21542
CVE-2025-21542 affects Oracle Communications Order and Service Management (OC OSM) in versions 7.4.0, 7.4.1 and 7.5.0. The issue is described as an access control weakness in the Security component that, with network access over HTTP and using low privileges, allows unauthorized update/insert/del...
6.3CVSS5.6AI score0.00192EPSS
SaveExploits0References1Affected Software1
CVE-2025-21495
...
4.4CVSS4.8AI score0.00538EPSS
SaveExploits0References1
20