Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
openid vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2019-11066
openid.php in LightOpenID up to and including 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method.
Lightopenid Project Lightopenid
4.3
CVSSv2
CVE-2012-6359
IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 prior to 6.2.0.11, 6.2.1 prior to 6.2.1.3, and 6.2.2 prior to 6.2.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 prior to 6.2.0.11, 6.2.1 prior to 6.2.1.3, and 6.2.2 prior to 6.2.2.2 do not check whethe...
Ibm Tivoli Federated Identity Manager 6.2.0.8
Ibm Tivoli Federated Identity Manager 6.2.0.9
Ibm Tivoli Federated Identity Manager 6.2.0.2
Ibm Tivoli Federated Identity Manager 6.2.0.3
Ibm Tivoli Federated Identity Manager 6.2.0.10
Ibm Tivoli Federated Identity Manager 6.2.0
Ibm Tivoli Federated Identity Manager 6.2.0.1
Ibm Tivoli Federated Identity Manager 6.2.1
Ibm Tivoli Federated Identity Manager 6.2.1.1
Ibm Tivoli Federated Identity Manager 6.2.1.2
Ibm Tivoli Federated Identity Manager 6.2.2
Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0
Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0.9
Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0.10
Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0.1
Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0.2
Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0.3
Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0.8
Ibm Tivoli Federated Identity Manager Business Gateway 6.2.1
Ibm Tivoli Federated Identity Manager Business Gateway 6.2.2
7.5
CVSSv2
CVE-2014-2048
The user_openid app in ownCloud Server prior to 5.0.15 allows remote malicious users to obtain access by leveraging an insecure OpenID implementation.
Owncloud Owncloud
7.5
CVSSv2
CVE-2021-45786
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges.
Maccms Maccms 10.0
4.3
CVSSv2
CVE-2021-32791
mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, the AES GCM encryption in mod_auth_openi...
Openidc Mod Auth Openidc
Fedoraproject Fedora 33
Fedoraproject Fedora 34
NA
CVE-2023-50714
yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0. In yii2-authclient prior to version 2.2.15, the Oauth2 PKCE implementation is vulnerable in 2 ways. First, the `authCodeVerifier` should be removed after usage ...
Yiiframework Yii2-authclient
6.4
CVSSv2
CVE-2014-2681
Zend Framework 1 (ZF1) prior to 1.12.4, Zend Framework 2 prior to 2.1.6 and 2.2.x prior to 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure prior to 2.0.2, ZendService_Amazo...
Zend Zendrest
Zend Zend Framework
Zend Zendservice Slideshare
Zend Zendservice Api
Zend Zendservice Audioscrobbler
Zend Zendservice Amazon
Zend Zendservice Technorati
Zend Zendservice Windowsazure
Zend Zendopenid
Zend Zendservice Nirvanix
6.8
CVSSv2
CVE-2014-2682
Zend Framework 1 (ZF1) prior to 1.12.4, Zend Framework 2 prior to 2.1.6 and 2.2.x prior to 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure prior to 2.0.2, ZendService_Amazo...
Zend Zendrest
Zend Zend Framework
Zend Zendservice Slideshare
Zend Zendservice Api
Zend Zendservice Audioscrobbler
Zend Zendservice Amazon
Zend Zendservice Technorati
Zend Zendservice Windowsazure
Zend Zendopenid
Zend Zendservice Nirvanix
5
CVSSv2
CVE-2014-2683
Zend Framework 1 (ZF1) prior to 1.12.4, Zend Framework 2 prior to 2.1.6 and 2.2.x prior to 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure prior to 2.0.2, ZendService_Amazo...
Zend Zendrest
Zend Zend Framework
Zend Zendservice Slideshare
Zend Zendservice Api
Zend Zendservice Audioscrobbler
Zend Zendservice Amazon
Zend Zendservice Technorati
Zend Zendservice Windowsazure
Zend Zendopenid
Zend Zendservice Nirvanix
5
CVSSv2
CVE-2017-6062
The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module prior to 2.1.5 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "OIDCUnAuthAction pass" configuration, which allows remote mali...
Openidc Mod Auth Openidc
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-3400
deserialization
CVE-2024-21788
CVE-2023-42433
CVE-2024-21841
CVE-2024-22095
local file inclusion
memory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »