Lucene search
+L

4 matches found

OSV
OSV
added 2025/07/31 9:31 p.m.30 views

GHSA-2X45-7FC3-MXWQ php-jwt contains weak encryption

php-jwt v6.11.0 was discovered to contain weak encryption...

6.9CVSS5.4AI score0.00137EPSS
SaveExploits0References12
ATTACKERKB
ATTACKERKB
added 2025/07/31 12:0 a.m.12 views

CVE-2025-45769

php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not...

7.3CVSS5.4AI score0.00137EPSS
SaveExploits0References9
OSV
OSV
added 2023/03/08 3:15 p.m.11 views

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

9.8CVSS7.3AI score0.0084EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.9 views

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions 6.8 through prior to 6.11 P3 6.11.0.3 that stems from the inclusion of incorrect API access controls in a multi-instance system, which can compromise...

6.5CVSS5.5AI score0.00603EPSS
SaveExploits0References3
Rows per page
Query Builder