Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

simplesamlphp simplesamlphp 1.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-0908
Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions prior to 1.8.2 allows remote malicious users to inject arbitrary web script or HTML via the link_href parameter.
Simplesamlphp Simplesamlphp 1.7Simplesamlphp Simplesamlphp 1.6.3Simplesamlphp Simplesamlphp 1.2Simplesamlphp Simplesamlphp 1.1Simplesamlphp Simplesamlphp 1.6Simplesamlphp Simplesamlphp 1.5.1Simplesamlphp Simplesamlphp 0.4Simplesamlphp SimplesamlphpSimplesamlphp Simplesamlphp 1.8Simplesamlphp Simplesamlphp 1.5Simplesamlphp Simplesamlphp 1.4Simplesamlphp Simplesamlphp 1.3Simplesamlphp Simplesamlphp 1.6.2Simplesamlphp Simplesamlphp 1.6.1Simplesamlphp Simplesamlphp 1.0Simplesamlphp Simplesamlphp 0.5
4.3
CVSSv2
CVE-2012-0040
Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other versions prior to 1.8.2 allows remote malicious users to inject arbitrary web script or HTML via the retryURL parameter.
Simplesamlphp Simplesamlphp 1.7Simplesamlphp Simplesamlphp 1.6.3Simplesamlphp Simplesamlphp 1.3Simplesamlphp Simplesamlphp 1.2Simplesamlphp SimplesamlphpSimplesamlphp Simplesamlphp 1.8Simplesamlphp Simplesamlphp 1.5Simplesamlphp Simplesamlphp 1.4Simplesamlphp Simplesamlphp 1.6.2Simplesamlphp Simplesamlphp 1.6.1Simplesamlphp Simplesamlphp 1.1Simplesamlphp Simplesamlphp 1.0Simplesamlphp Simplesamlphp 1.6Simplesamlphp Simplesamlphp 1.5.1Simplesamlphp Simplesamlphp 0.5Simplesamlphp Simplesamlphp 0.4
NA
CVE-2010-10002
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the argument AuthState le...
Simplesamlphp Simplesamlphp-module-openid
NA
CVE-2010-10004
A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this...
Simplesamlphp Information Cards Module
5
CVSSv2
CVE-2017-12874
The InfoCard module 1.0 for SimpleSAMLphp allows malicious users to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.
Simplesamlphp Infocard Module 1.0Debian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0
5.8
CVSSv2
CVE-2019-11041
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may...
Php PhpDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Apple Mac Os XOpensuse Leap 15.0Redhat Software Collections 1.0Tenable Tenable.sc
5.8
CVSSv2
CVE-2019-11042
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may...
Php PhpDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Apple Mac Os XOpensuse Leap 15.0Redhat Software Collections 1.0Tenable Tenable.sc
6.4
CVSSv2
CVE-2017-9788
In Apache httpd prior to 2.2.34 and 2.4.x prior to 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '...
Apache Http ServerDebian Debian Linux 8.0Debian Debian Linux 9.0Apple Mac Os XNetapp Storage Automation Store -Netapp Oncommand Unified Manager -Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Tus 7.4Redhat Enterprise Linux Server Eus 7.5
5
CVSSv2
CVE-2018-17189
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.
Apache Http Server 2.4.20Apache Http Server 2.4.23Apache Http Server 2.4.25Apache Http Server 2.4.26Apache Http Server 2.4.18Apache Http Server 2.4.17Apache Http Server 2.4.27Apache Http Server 2.4.29Apache Http Server 2.4.28Apache Http Server 2.4.33Apache Http Server 2.4.37Apache Http Server 2.4.30Apache Http Server 2.4.34Apache Http Server 2.4.35Netapp Santricity Cloud Connector -Netapp Storage Automation Store -Fedoraproject Fedora 28Fedoraproject Fedora 29Debian Debian Linux 9.0Oracle Retail Xstore Point Of Service 7.1Oracle Retail Xstore Point Of Service 7.0Oracle Hospitality Guest Access 4.2.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook