CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

EUVD•added 2025/10/03 8:7 p.m.•1 views

EUVD-2022-5275

Malicious code in bioql PyPI...

4.3CVSS8.1AI score0.00956EPSS

Exploits0References31

OSV•added 2022/05/13 1:9 a.m.•33 views

GHSA-V45R-RJ5X-HPG2 Cleartext Transmission of Sensitive Information in Apache CXF

The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing th...

4.3CVSS8.8AI score0.00956EPSS

Exploits0References18

Github Security Blog•added 2022/05/13 1:9 a.m.•34 views

Cleartext Transmission of Sensitive Information in Apache CXF

4.3CVSS8.5AI score0.00956EPSS

Exploits0References18Affected Software1

NVD•added 2014/07/07 2:55 p.m.•17 views

CVE-2014-0035

4.3CVSS6AI score0.00956EPSS

Exploits0References14

Prion•added 2014/07/07 2:55 p.m.•25 views

Design/Logic Flaw

4.3CVSS6.5AI score0.00956EPSS

Exploits0References14Affected Software2

CVE•added 2014/07/07 2:0 p.m.•70 views

CVE-2014-0035

The CVE-2014-0035 issue affects Apache CXF, specifically SymmetricBinding when EncryptBeforeSigning is enabled and UsernameToken policy is EncryptedSupportingToken. The vulnerability causes the UsernameToken to be transmitted in cleartext, enabling an attacker to sniff sensitive information over ...

4.3CVSS8.7AI score0.00956EPSS

Exploits0References14Affected Software1

Cvelist•added 2014/07/07 2:0 p.m.•32 views

CVE-2014-0035

6AI score0.00956EPSS

Exploits0References14

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by