Skip to content
OpenAdvisories

Archive

1 September 2017

Vulnerabilities first published on this day (UTC), newest first.

← August 2017 2017 / September /1 October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-12873

    Incorrect persistent NameID generation in SimpleSAMLphp

    SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.

    simplesamlphp simplesamlphp simplesamlphp/simplesamlphp Debian Ubuntu Packagist
  • Critical 9.8
    CVE-2017-12868

    SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module

    The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions…

    simplesamlphp simplesamlphp simplesamlphp/simplesamlphp Debian Ubuntu Packagist