janrain kayıtları
janrain üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %33,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-20 Improper Input Validation1
- CWE-284 Improper Access Control1
- CWE-399 Resource Management Errors1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2016-2049İstismar yok | examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_janrain · php-openid · CWE-284 | Yüksek8,8 | — | %2,2 | 1 Şub 2016 |
31İzleyin | CVE-2013-4701İstismar yok | Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet sjanrain · php-openid | Yüksek7,5 | — | %3,0 | 21 Ağu 2013 |
28İzleyin | CVE-2011-0771İstismar yok | The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticatejanrain · rpx · CWE-20 | Orta6,8 | — | %2,1 | 3 Şub 2011 |
20İzleyin | CVE-2012-2296İstismar yok | The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x.janrain · rpx · CWE-200 | Orta5,0 | — | %1,6 | 25 Tem 2012 |
20İzleyin | CVE-2011-3707İstismar yok | JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php filjanrain · php-openid · CWE-200 | Orta5,0 | — | %1,4 | 23 Eyl 2011 |
18İzleyin | CVE-2013-1812İstismar yok | The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDSfedoraproject · fedora · CWE-399 | Orta4,3 | — | %2,1 | 12 Ara 2013 |
- CVE-2016-204936İzleyin
examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_
YüksekCVSS 8,8İstismar yokEPSS %2janrain · php-openid1 Şub 2016
- CVE-2013-470131İzleyin
Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet s
YüksekCVSS 7,5İstismar yokEPSS %3janrain · php-openid21 Ağu 2013
- CVE-2011-077128İzleyin
The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticate
OrtaCVSS 6,8İstismar yokEPSS %2janrain · rpx3 Şub 2011
- CVE-2012-229620İzleyin
The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x.
OrtaCVSS 5,0İstismar yokEPSS %2janrain · rpx25 Tem 2012
- CVE-2011-370720İzleyin
JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php fil
OrtaCVSS 5,0İstismar yokEPSS %1janrain · php-openid23 Eyl 2011
- CVE-2013-181218İzleyin
The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS
OrtaCVSS 4,3İstismar yokEPSS %2fedoraproject · fedora12 Ara 2013