6183 matches found
Yaml-cpp Heap Buffer Overflow DoS
The vulnerability of the SingleDocParser::HandleFlowMap function in the C++ YAML library, Yaml-cpp, is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created YAML file...
CVE-2025-9485
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
EUVD-2025-32420
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
CVE-2025-9485 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
CVE-2025-9485: Improper Verification of Cryptographic Signature
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
WordPress plugin OAuth Single Sign On – SSO (OAuth Client) 数据伪造问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A data forgery issue...
PT-2025-40621
Name of the Vulnerable Software and Affected Versions OAuth Single Sign On – SSO OAuth Client plugin for WordPress versions up to and including 6.26.12 Description The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is susceptible to improper verification of cryptographic signatures...
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token() vulnerability
Authentication Bypass via getresourceownerfromidtoken vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin OAuth Single Sign On – SSO OAuth Client versions = 6.26.12...
EUVD-2024-44213
Malicious code in bioql PyPI...
EUVD-2024-48644
Malicious code in bioql PyPI...
EUVD-2023-41181
Malicious code in bioql PyPI...
EUVD-2025-11790
Malicious code in bioql PyPI...
EUVD-2025-27666
Malicious code in bioql PyPI...
EUVD-2025-29078
Malicious code in bioql PyPI...
EUVD-2025-19700
Malicious code in bioql PyPI...
EUVD-2025-19725
Malicious code in bioql PyPI...
EUVD-2021-31599
Malicious code in bioql PyPI...
EUVD-2022-37170
Malicious code in bioql PyPI...