14 matches found
CVE-2019-13497
CVE-2019-13497 Exploit Title: Cross Site Request Forgery CSRF Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali Linux , Windows 7 ,Ubantu 16.04 To...
commonmeta-py (>=0.10.0, <=0.16.3), foodreversefda (>=0.1.0, <=0.1.8) +5 more potentially affected by unknown CVE via vcrpy (5.1.0)
vcrpy PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - commonmeta-py =0.10.0, =0.1.0, =1.8.0, =1.2.1, =1.0.6, =2.166.0, =2.247.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...
oneidentity-safeguard-sessions-plugin-sdk (>=1.4.2, <=1.6.0) potentially affected by unknown CVE via vcrpy (2.1.0)
vcrpy PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - oneidentity-safeguard-sessions-plugin-sdk =1.4.2, =1.6.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...
airbyte-source-linnworks (>=0.1.7, <=0.1.66), data-harvesting (2.0.0) +4 more potentially affected by unknown CVE via vcrpy (6.0.2)
vcrpy PYPI version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - airbyte-source-linnworks =0.1.7, =1.3.0, =0.3.0, =0.4.1 - vcrpy-encrypt 0.9.2 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...
airbyte-source-gitlab (>=2.1.1, <=4.4.0.dev202506251856), airbyte-source-quickbooks (>=3.0.2, <=4.0.4) +9 more potentially affected by unknown CVE via vcrpy (4.1.1)
vcrpy PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - airbyte-source-gitlab =2.1.1, =3.0.2, =0.2.3, =1.0.0, =1.0.0, =8.2.1, =1.7.1, =1.0.2, =2.54.0, =2.92.0 Source cves: unknown CVE Source advisory:...
oneidentity-safeguard-sessions-plugin-sdk (>=1.1.7, <=1.3.4) potentially affected by unknown CVE via vcrpy (2.0.1)
vcrpy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - oneidentity-safeguard-sessions-plugin-sdk =1.1.7, =1.3.4 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...
geopackage-python (>=2.1.0.1, <=2.2.0.2), getccwarc (>=0.0.1.dev23, <=0.0.1.dev34) +5 more potentially affected by CVE-2025-71176 via pytest (4.6.3)
pytest PYPI version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - geopackage-python =2.1.0.1, =0.0.1.dev23, =1.2.2, =2019.6.13, =0.0.2, =0.0.3 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...
CVE-2025-59363
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...
CVE-2025-59363: Incorrect Resource Transfer Between Spheres
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...
CVE-2025-59363
In One Identity OneLogin prior to 2025.3.0, the GET /api/2/apps endpoint returned OIDC client_secret values alongside app metadata, enabling disclosure of sensitive credentials. This is caused by excessive data being returned by the Apps API v2 and constitutes a breach of confidentiality for OIDC...
alfrodull (0.1.0), getccwarc (>=0.0.1.dev23, <=0.0.1.dev34) +3 more potentially affected by CVE-2024-5569 via zipp (0.5.1)
zipp PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - alfrodull 0.1.0 - getccwarc =0.0.1.dev23, =1.2.2, =0.0.2, =0.0.3 Source cves: CVE-2024-5569 Source advisory: OSV:GHSA-JFMJ-5V4G-7637...
Exploit for Cross-Site Request Forgery (CSRF) in Oneidentity Cloud_Access_Manager
CVE-2019-13497 Exploit Title: Cross Site Request Forgery CSR...