cloudfoundry_uaa

CloudFoundry 用户账户与认证（UAA）服务器 UAA 是一个多租户身份管理服务，用于 Cloud Foundry，但也可以作为独立的 OAuth2 服务器使用。它的主要角色是作为 OAuth2 提供者，为客户端应用程序在代表 Cloud Foundry 用户执行操作时颁发令牌。 它还可以使用用户的 Cloud Foundry 凭证对用户进行认证， 并且可以作为使用这些凭证（或其他凭证）的 SSO 服务。它 具有用于管理用户账户和注册 OAuth2 客户端的端点，以及各种其他管理功能。 坐标 令牌：关于令牌、作用域和权限的说明 技术论坛：cf-dev 邮件列表 文档：docs/...

EUVD-2015-9275

Malware in sbrugna...

EUVD-2022-4638

Malicious code in bioql PyPI...

EUVD-2024-45991

Malicious code in bioql PyPI...

CVE-2024-52289

authentik is an open-source identity provider. Redirect URIs in the OAuth2 provider in authentik are checked by RegEx comparison. When no Redirect URIs are configured in a provider, authentik will automatically use the first redirecturi value received as an allowed redirect URI, without escaping...

CVE-2015-9435

The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers...

CVE-2024-52289

authentik is an open-source identity provider. Redirect URIs in the OAuth2 provider in authentik are checked by RegEx comparison. When no Redirect URIs are configured in a provider, authentik will automatically use the first redirecturi value received as an allowed redirect URI, without escaping...

Mule modules contain Directory Traversal

Directory Traversal in APIkit, http-connector, and OAuth2 Provider modules in Mulesoft 3.x, 4.x and Mulesoft API Gateway all versions released before August 1, 2019 allow remote attackers to read files accessible to the Mule process...

GHSA-MWH9-GR45-XVV4 Mule modules contain Directory Traversal

Directory Traversal in APIkit, http-connector, and OAuth2 Provider modules in Mulesoft 3.x, 4.x and Mulesoft API Gateway all versions released before August 1, 2019 allow remote attackers to read files accessible to the Mule process...

CVE-2015-9435

The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers...

Design/Logic Flaw

The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers...

CVE-2015-9435

The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers...

CVE-2015-9435

The CVE-2015-9435 entry concerns the WordPress plugin oauth2-provider (before 3.1.5). The vulnerability arises from incorrect generation of random numbers (insecure pseudorandom number generation) in the plugin, as documented across multiple sources. Impact ranges from Partial confidentiality, in...

CVE-2019-15630

Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow...

Directory traversal

Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow...

CVE-2019-15630

CVE-2019-15630 describes a directory traversal vulnerability affecting MuleSoft products: APIkit, HTTP connector, and OAuth2 Provider components in Mule Runtime 3.x/4.x and all MuleSoft API Gateway versions released before August 1, 2019. The issue permits remote attackers to read files accessibl...