juraj somorovsky vulnerabilities and exploits

(subscribe to this query)

Eucalyptus prior to 2.0.3 and Eucalyptus EE prior to 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle malicious users to execute arbitrary commands by modifying a request...

Eucalyptus Eucalyptus Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 11.04

Shibboleth OpenSAML library 2.4.x prior to 2.4.3 and 2.5.x prior to 2.5.1, and IdP prior to 2.3.2, allows remote malicious users to forge messages and bypass authentication via an "XML Signature wrapping attack."

Shibboleth Opensaml 2.4.0 Shibboleth Opensaml 2.4.1 Shibboleth Opensaml 2.4.2 Shibboleth Opensaml 2.5.0 Shibboleth Shibboleth-identity-provider 2.2.0 Shibboleth Shibboleth-identity-provider 2.1.5 Shibboleth Shibboleth-identity-provider 2.1.4 Shibboleth Shibboleth-identity-provider 2.1.3 Shibboleth Shibboleth-identity-provider 2.3.0 Shibboleth Shibboleth-identity-provider 2.2.1 Shibboleth Shibboleth-identity-provider 2.1.0 Shibboleth Shibboleth-identity-provider 2.0.0 Shibboleth Shibboleth-identity-provider Shibboleth Shibboleth-identity-provider 2.1.2 Shibboleth Shibboleth-identity-provider 2.1.1

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a ...

Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...

3 Github repositories

OX App Suite 7.10.1 allows Content Spoofing.

Open-xchange Open-xchange Appsuite 7.10.1

Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite prior to 7.6.3-rev31, 7.8.x prior to 7.8.2-rev31, 7.8.3 prior to 7.8.3-rev41, and 7.8.4 prior to 7.8.4-rev28 allows remote malicious users to inject arbitrary web script or HTML via the data-tar...

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.6.3 Open-xchange Open-xchange Appsuite 7.8.0 Open-xchange Open-xchange Appsuite 7.8.2 Open-xchange Open-xchange Appsuite 7.8.3 Open-xchange Open-xchange Appsuite 7.8.4

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook