Lucene search
+L

111 matches found

BDU FSTEC
BDU FSTEC
added 2024/06/20 12:0 a.m.10 views

The vulnerability of the JWE Token Handler component in JavaScript object signing and encryption technologies is related to an uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerability of the JWE Token Handler component in JavaScript object signing and encryption technologies with Python is related to high resource consumption during decryption using the created JSON Web Encryption token. Exploiting this vulnerability can allow a malicious actor to cause servi...

6.8CVSS6.4AI score0.00783EPSS
SaveExploits1References5Affected Software2
Positive Technologies
Positive Technologies
added 2024/06/18 12:0 a.m.9 views

PT-2024-4825 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.2.34646 Description: The issue is related to insufficient protection of registration data in the Access Token Handler component. This could allow a remote attacker to gain unauthorized access to...

7.5CVSS7.5AI score0.00443EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.8 views

The vulnerability of the Authentication Token Handler component in the IntelliJ IDEA integrated development environment allows a attacker to send the authentication token to any arbitrary URL.

The vulnerability of the Authentication Token Handler component in the IntelliJ IDEA integrated development environment exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to send authentication tokens to any specified URL...

6.4CVSS5.9AI score0.00315EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/15 12:0 a.m.10 views

The vulnerability of the Session Token Handler component in the application for creating supplements, related to integrating external data sources with the Splunk Add-on Builder platform, arises from improper processing of output data for registration logs. This allows a malicious actor to gain unauthorized access to edit the application.

The vulnerability of the Session Token Handler component in application add-ons for integrating external data sources with the Splunk Add-on Builder platform is related to improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor, operating...

8.3CVSS7.1AI score0.00478EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/01/07 10:15 a.m.30 views

CVE-2014-125057

A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/filters.php of the component CSRF Token Handler. The manipulation of the argument token leads to incorrect comparison. It is possible to initiate the attack...

9.8CVSS5.5AI score0.00805EPSS
SaveExploits0References3
Prion
Prion
added 2023/01/07 10:15 a.m.21 views

Cross site request forgery (csrf)

A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/filters.php of the component CSRF Token Handler. The manipulation of the argument token leads to incorrect comparison. It is possible to initiate the attack...

2.1CVSS7.2AI score0.00805EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/01/07 9:19 a.m.53 views

CVE-2014-125057

CVE-2014-125057 affects the mrobit robitailletheknot CSRF Token Handler, specifically the file app/filters.php. The vulnerability arises from improper handling of the _token argument, causing incorrect comparison and enabling remote attack. Exploitation details are not fully enumerated in the pro...

9.8CVSS6.7AI score0.00805EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/01/07 9:19 a.m.33 views

CVE-2014-125057 mrobit robitailletheknot CSRF Token filters.php comparison

A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/filters.php of the component CSRF Token Handler. The manipulation of the argument token leads to incorrect comparison. It is possible to initiate the attack...

3.1CVSS9.7AI score0.00805EPSS
SaveExploits0References3
CVE
CVE
added 2022/06/03 7:10 p.m.55 views

CVE-2020-36533

The connected sources describe CVE-2020-36533 affecting Klapp App (Cordova-based). The vulnerability arises from improper processing of the JSON Web Token (JWT) Handler, enabling weak authentication. The issue is potentially exploitable remotely. No specific affected versions, root cause details,...

9.8CVSS6.8AI score0.01441EPSS
SaveExploits1References2Affected Software1
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.13 views

CVE-2026-45069: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

More info at https://symfony.com/cve-2026-45069...

9.1CVSS5.8AI score0.00237EPSS
SaveExploits0Affected Software1
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.9 views

CVE-2026-45069: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

More info at https://symfony.com/cve-2026-45069...

9.1CVSS5.8AI score0.00237EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder