Lucene search
+L

613 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/03 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-32725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypas...

8.3CVSS5.8AI score0.00834EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2026/04/02 8:37 a.m.11 views

SUSE CVE-2026-32725

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses "....

8.3CVSS5.8AI score0.00834EPSS
SaveExploits1References3
NVD
NVD
added 2026/03/31 6:16 p.m.13 views

CVE-2026-32726

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking whether a requested resource path was...

8.1CVSS0.00272EPSS
SaveExploits1References2
OSV
OSV
added 2026/03/31 6:16 p.m.15 views

DEBIAN-CVE-2026-32725

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses "....

8.3CVSS5.3AI score0.00834EPSS
SaveExploits1References1
NVD
NVD
added 2026/03/31 6:16 p.m.12 views

CVE-2026-32725

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses "....

8.3CVSS0.00834EPSS
SaveExploits1References2
OSV
OSV
added 2026/03/31 6:16 p.m.13 views

DEBIAN-CVE-2026-32726

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking whether a requested resource path was...

8.1CVSS5.3AI score0.00272EPSS
SaveExploits1References1
OSV
OSV
added 2026/03/31 6:16 p.m.14 views

UBUNTU-CVE-2026-32725

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses "....

8.3CVSS5.8AI score0.00834EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/31 6:16 p.m.8 views

UBUNTU-CVE-2026-32726

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking whether a requested resource path was...

8.1CVSS5.7AI score0.00272EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/03/31 5:01 p.m.12 views

EUVD-2026-17561

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses "....

8.3CVSS5.8AI score0.00834EPSS
SaveExploits1References2
OSV
OSV
added 2026/03/31 5:01 p.m.10 views

CVE-2026-32725 SciTokens C++: Relative Path Traversal Vulnerability

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses "....

8.3CVSS5.8AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/31 5:01 p.m.4 views

CVE-2026-32725

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses "....

8.3CVSS5.8AI score0.00834EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/31 5:01 p.m.6 views

CVE-2026-32725 SciTokens C++: Relative Path Traversal Vulnerability

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses "....

8.3CVSS5.8AI score0.00834EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2026/03/31 5:01 p.m.16 views

CVE-2026-32725

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses "....

8.3CVSS5.3AI score0.00834EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2026/03/31 5:01 p.m.5 views

CVE-2026-32726

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking whether a requested resource path was...

8.1CVSS5.8AI score0.00272EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2026/03/31 5:01 p.m.36 views

CVE-2026-32726

SciTokens C++ prior to 1.4.1 contains an authorization bypass in path-based scope validation. The enforcer used a string-prefix check without requiring a path boundary, allowing a token scoped to one path to authorize sibling paths sharing a prefix. This vulnerability has a CVSS v3.1 base score o...

8.1CVSS5.8AI score0.00272EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/31 5:01 p.m.7 views

CVE-2026-32726 SciTokens C++: Sibling-Path Authorization Bypass

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking whether a requested resource path was...

8.1CVSS5.8AI score0.00272EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/03/31 5:01 p.m.8 views

EUVD-2026-17563

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking whether a requested resource path was...

8.1CVSS5.8AI score0.00272EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/03/31 5:01 p.m.38 views

CVE-2026-32726 SciTokens C++: Sibling-Path Authorization Bypass

SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking whether a requested resource path was...

8.1CVSS0.00272EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/03/31 12:00 a.m.11 views

PT-2026-29312

Name of the Vulnerable Software and Affected Versions SciTokens C++ versions prior to 1.4.1 Description SciTokens C++ is a library for creating and using SciTokens. Versions before 1.4.1 have an authorization bypass when handling path-based scopes within tokens. The library normalizes the scope...

8.3CVSS5.9AI score0.00834EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.17 views

scitokens 安全漏洞

Scitokens is an open-source science computing token library developed by SciTokens. Versions of Scitokens prior to 1.4.1 contained security vulnerabilities. These vulnerabilities stemmed from the executor’s use of a simple string comparison when checking whether the resource path in a request was...

8.1CVSS5.8AI score0.00272EPSS
SaveExploits1References2
Rows per page
Query Builder