Skip to content
Noroxi

janrain records

6 published records for vendor janrain.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
33.3%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    6 records
    • CVE-2016-2049
      36Monitor

      examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_

      HighCVSS 8.8No exploitEPSS 2%

      janrain · php-openidFeb 1, 2016

    • CVE-2013-4701
      31Monitor

      Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet s

      HighCVSS 7.5No exploitEPSS 2%

      janrain · php-openidAug 21, 2013

    • CVE-2011-0771
      28Monitor

      The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticate

      MediumCVSS 6.8No exploitEPSS 2%

      janrain · rpxFeb 3, 2011

    • CVE-2011-3707
      20Monitor

      JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php fil

      MediumCVSS 5.0No exploitEPSS 1%

      janrain · php-openidSep 23, 2011

    • CVE-2012-2296
      20Monitor

      The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x.

      MediumCVSS 5.0No exploitEPSS 1%

      janrain · rpxJul 25, 2012

    • CVE-2013-1812
      18Monitor

      The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS

      MediumCVSS 4.3No exploitEPSS 2%

      fedoraproject · fedoraDec 12, 2013