Lucene search
+L

14 matches found

SUSE CVE
SUSE CVE
added 3 days ago7 views

SUSE CVE-2026-16206

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

6.5CVSS6.2AI score0.0035EPSS
Exploits0References3
NVD
NVD
added 3 days ago9 views

CVE-2026-16206

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

6.5CVSS0.0035EPSS
Exploits0References7
EUVD
EUVD
added 3 days ago11 views

EUVD-2026-45417

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

6.5CVSS6.2AI score0.0035EPSS
Exploits0References7
OSV
OSV
added 3 days ago5 views

CVE-2026-16206 django-oauth django-oauth-toolkit oauth2_validators.py _load_id_token session expiration

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

5.3CVSS6.2AI score0.0035EPSS
Exploits0References9
Cvelist
Cvelist
added 3 days ago43 views

CVE-2026-16206 django-oauth django-oauth-toolkit oauth2_validators.py _load_id_token session expiration

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

6.5CVSS0.0035EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 3 days ago13 views

PT-2026-61040

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function load id token of the file oauth2 provider/oauth2 validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of th...

6.5CVSS6.2AI score0.0035EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-17567

Malware in sbrugna...

6.1CVSS6.3AI score0.00722EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 7:39 p.m.10 views

CVE-2021-30650

A reflected cross-site scripting XSS vulnerability in the Symantec Layer7 API Management OAuth Toolkit OTK allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting...

6.1CVSS6AI score0.00722EPSS
Exploits0References1
NVD
NVD
added 2022/02/18 6:15 p.m.23 views

CVE-2021-30650

A reflected cross-site scripting XSS vulnerability in the Symantec Layer7 API Management OAuth Toolkit OTK allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting...

6.1CVSS0.00722EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/18 6:15 p.m.3 views

CVE-2021-30650

A reflected cross-site scripting XSS vulnerability in the Symantec Layer7 API Management OAuth Toolkit OTK allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting...

6.1CVSS6.4AI score0.00722EPSS
Exploits0References2
OSV
OSV
added 2022/02/18 6:15 p.m.6 views

CVE-2021-30650

A reflected cross-site scripting XSS vulnerability in the Symantec Layer7 API Management OAuth Toolkit OTK allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting...

6.1CVSS6.4AI score0.00722EPSS
Exploits0References1
Prion
Prion
added 2022/02/18 6:15 p.m.22 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability in the Symantec Layer7 API Management OAuth Toolkit OTK allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting...

4.3CVSS6AI score0.00722EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/18 5:50 p.m.26 views

CVE-2021-30650

A reflected cross-site scripting XSS vulnerability in the Symantec Layer7 API Management OAuth Toolkit OTK allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting...

6.2AI score0.00722EPSS
Exploits0References1
CVE
CVE
added 2022/02/18 5:50 p.m.100 views

CVE-2021-30650

The CVE-2021-30650 issue affects Symantec Layer7 API Management OAuth Toolkit (OTK). It is a reflected XSS vulnerability where a remote attacker can craft a malicious URL targeting the OTK web UI, enabling injection of arbitrary code into the OTK web UI client application. Impact is described as ...

6.1CVSS6AI score0.00722EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder