Filter
-Infinity
0
Trending
IBM Cognos Analyticsjsonwebtoken unrestricted key type could lead to legacy keys usage
8.1
First published (updated )
IBM Cognos Analyticsjsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
6.3
First published (updated )
IBM Cognos Analyticsjsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()
7.6
First published (updated )
Auth0 Passport WSFED SAML2Passport-wsfed-saml2 vulnerable to Authentication Bypass for WSFed authentication
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Auth0 Express Openid ConnectOpen Redirect in express-openid-connect
7.5
First published (updated )
Auth0 Express Openid ConnectSession fixation in express-openid-connect
8.8
First published (updated )
Auth0Reflected XSS from the callback handler's error query parameter
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Auth0 AD/LDAP ConnectorCSRF in Auth0 ad-ldap-connector
8.8
First published (updated )
rubygems/omniauth-auth0Regression in JWT Signature Validation
9.1
First published (updated )
Auth0Authorization header is not sanitized in an error object in auth0
7.7
First published (updated )
Auth0 Express JWTAuthorization bypass in express-jwt
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Auth0 LoginAn issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. A user can perform …
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
nuget/Auth0.AuthenticationApiAuth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be acci…
7.5
First published (updated )
Auth0 PassportAuth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Auth0Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when i…
9.8
First published (updated )
Auth0The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audie…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.