Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.10 views

CVE-2025-61650

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: from before...

4.8CVSS5.3AI score0.00247EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-3789

Malicious code in bioql PyPI...

7.5CVSS7.7AI score0.01261EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2017-12874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation...

7.5CVSS7.4AI score0.01261EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/05/14 1:5 a.m.20 views

SimpleSAMLphp InfoCard module Incorrect signature verification

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

7.5CVSS6.6AI score0.01261EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/05/14 1:5 a.m.11 views

GHSA-FJ28-869X-VV5G SimpleSAMLphp InfoCard module Incorrect signature verification

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

7.5CVSS7.7AI score0.01261EPSS
Exploits0References7
Debian
Debian
added 2018/03/02 6:15 a.m.24 views

[SECURITY] [DSA 4127-1] simplesamlphp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4127-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst March 02, 2018 https://www.debian.org/security/faq -...

9.8CVSS8.7AI score0.03111EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2017/12/13 12:0 a.m.34 views

Debian DLA-1205-1 : simplesamlphp security update

The simplesamlphp package in wheezy is vulnerable to multiple attacks on authentication-related code, leading to unauthorized access and information disclosure. CVE-2017-12867 The SimpleSAMLAuthTimeLimitedToken class allows attackers with access to a secret token to extend its validity period by...

9.8CVSS7.1AI score0.02346EPSS
Exploits0References8
CNVD
CNVD
added 2017/09/02 12:0 a.m.2 views

SimpleSAMLphp InfoCard Module Spoofing Vulnerability

SimpleSAMLphp is a PHP authentication application that implements the SAML2.0 service provider and identity provider functionality . A spoofing vulnerability exists in the InfoCard module in SimpleSAMLphp version 1.0 due to the program failing to properly check the return value in signature...

7.5CVSS7.6AI score0.01261EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/09/01 9:29 p.m.29 views

CVE-2017-12874

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

7.5CVSS7.1AI score0.01261EPSS
Exploits0References2
Prion
Prion
added 2017/09/01 9:29 p.m.14 views

Input validation

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

5CVSS7.4AI score0.01261EPSS
Exploits0References3Affected Software2
NVD
NVD
added 2017/09/01 9:29 p.m.13 views

CVE-2017-12874

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

7.5CVSS7.5AI score0.01261EPSS
Exploits0References3
OSV
OSV
added 2017/09/01 9:29 p.m.23 views

CVE-2017-12874

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

7.5CVSS6.6AI score
Exploits0References3
OSV
OSV
added 2017/09/01 9:29 p.m.0 views

UBUNTU-CVE-2017-12874

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

7.5CVSS7.1AI score0.01261EPSS
Exploits0References3
CVE
CVE
added 2017/09/01 9:0 p.m.62 views

CVE-2017-12874

CVE-2017-12874 affects the SimpleSAMLphp InfoCard module (version 1.0) and is caused by an incorrect check of return values in signature validation utilities, enabling spoofing of XML messages. The issue is documented in multiple security advisories (e.g., Debian DSA-4127-1) and is listed among a...

7.5CVSS7.7AI score0.01261EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2017/09/01 9:0 p.m.31 views

CVE-2017-12874

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

8.4AI score0.01261EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2017/09/01 9:0 p.m.21 views

CVE-2017-12874

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

7.5CVSS7.5AI score0.01261EPSS
Exploits0
Rows per page
Query Builder