Lucene search
K

576 matches found

OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.16 views

Debian: Security Advisory (DLA-1205-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.7AI score0.00764EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:54 a.m.1 views

SUSE CVE-2016-9955

The SimpleSAMLXMLValidator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service memory consumption by leveraging improper conversion of return values to boolean...

6.3CVSS7AI score0.0041EPSS
Exploits0References3
OSV
OSV
added 2023/01/17 9:30 a.m.14 views

GHSA-CHGC-RQJR-46GG simplesamlphp-module-openidprovider Cross Site Scripting vulnerability

A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads to cross site scripting...

5.4CVSS4.4AI score0.00549EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2023/01/17 9:30 a.m.18 views

simplesamlphp-module-openidprovider Cross Site Scripting vulnerability

A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads to cross site scripting...

5.4CVSS5.3AI score0.00549EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2023/01/17 8:15 a.m.10 views

CVE-2010-10008

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads...

5.4CVSS4.3AI score0.00549EPSS
Exploits0References4
Prion
Prion
added 2023/01/17 8:15 a.m.10 views

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads...

4.9CVSS6.5AI score0.00549EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/01/17 7:35 a.m.14 views

CVE-2010-10008 simplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads...

4CVSS5.2AI score0.00549EPSS
Exploits0References4
CVE
CVE
added 2023/01/17 7:35 a.m.38 views

CVE-2010-10008

Summary: CVE-2010-10008 affects the simplesamlphp-module-openidprovider component (versions up to 0.8.x). The issue is a cross-site scripting flaw in the templates/trust.tpl.php file triggered by manipulation of the StateID argument. Exploitation can be remote. The publicly documented remediation...

5.4CVSS4.4AI score0.00549EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/17 7:35 a.m.6 views

CVE-2010-10008 simplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads...

4CVSS6.2AI score0.00549EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.2 views

PT-2023-9891 · Unknown · Simplesamlphp +1

Name of the Vulnerable Software and Affected Versions: simplesamlphp simplesamlphp-module-openidprovider versions up to 0.8.x Description: A vulnerability was found in the simplesamlphp simplesamlphp-module-openidprovider. The issue affects an unknown functionality of the file...

5.4CVSS4.3AI score0.00549EPSS
Exploits0References8
NVD
NVD
added 2023/01/09 8:15 a.m.9 views

CVE-2010-10004

A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this issue. The...

6.1CVSS4.5AI score0.00251EPSS
Exploits0References4
Prion
Prion
added 2023/01/09 8:15 a.m.8 views

Cross site scripting

A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this issue. The...

5.8CVSS6.5AI score0.00251EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/01/09 7:15 a.m.9 views

CVE-2010-10004 Information Cards Module cross site scripting

A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this issue. The...

4CVSS6AI score0.00251EPSS
Exploits0References4
CVE
CVE
added 2023/01/09 7:15 a.m.66 views

CVE-2010-10004

CVE-2010-10004 concerns a cross-site scripting vulnerability in the Information Cards Module of simpleSAMLphp . The issue arises from an unspecified processing path within the module, enabling XSS. The attack can be initiated remotely, and upgrading to version 1.0 mitigates the issue; the patch i...

6.1CVSS4.8AI score0.00251EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/09 12:0 a.m.3 views

PT-2023-9888 · Unknown · Simplesamlphp

Name of the Vulnerable Software and Affected Versions: simpleSAMLphp versions prior to 1.0 Description: A vulnerability was found in the Information Cards Module and classified as problematic. This issue affects some unknown processing, leading to cross-site scripting. The attack may be initiated...

6.1CVSS6.8AI score0.00251EPSS
Exploits0References8
CNNVD
CNNVD
added 2023/01/09 12:0 a.m.2 views

SimpleSAMLphp 跨站脚本漏洞

SimpleSAMLphp is a PHP authentication application that implements SAML 2.0 service provider and identity provider functionality. SimpleSAMLphp suffers from a cross-site scripting vulnerability that stems from some unknown processing that manipulates to cause cross-site scripting...

6.1CVSS4.3AI score0.00251EPSS
Exploits0References5
OSV
OSV
added 2023/01/01 6:30 p.m.19 views

GHSA-GGJ9-6X8J-49W9 SimpleSAMLphp simplesamlphp-module-openid

A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the argument AuthState leads to cross site scripting. It is possible to...

6.1CVSS6AI score0.00292EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2023/01/01 6:30 p.m.17 views

SimpleSAMLphp simplesamlphp-module-openid

A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the argument AuthState leads to cross site scripting. It is possible to...

6.1CVSS4.8AI score0.00292EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2023/01/01 5:15 p.m.4 views

CVE-2010-10002

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the argument AuthState leads to cross site...

6.1CVSS4.4AI score0.00292EPSS
Exploits0References4
Prion
Prion
added 2023/01/01 5:15 p.m.6 views

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the argument AuthState leads to cross site...

5.8CVSS6.4AI score0.00292EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder