Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 29
Reset filtersSimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion
SimpleSAMLphp casserver: Open Redirect in logout
SimpleSAMLphp Information Disclosure vulnerability
SimpleSAMLphp Reflected Cross-site Scripting vulnerability
SimpleSAMLphp exposes credentials in session storage
SimpleSAMLphp Link Injection vulnerability
simplesamlphp-module-openidprovider Cross Site Scripting vulnerability
Information Cards Module vulnerable to Cross-site Scripting
SimpleSAMLphp simplesamlphp-module-openid
SimpleSAMLphp Unauthenticated encryption in CBC mode
SimpleSAMLphp Incorrect IV generation for encryption
SimpleSAMLphp Open redirection protection bypass
SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module
SimpleSAMLphp Information leakage issue in the sanitycheck module
SimpleSAMLphp InfoCard module Incorrect signature verification
SimpleSAMLphp Authentication context bypass in the multiauth module
SimpleSAMLphp XSS Vulnerability
SimpleSAMLphp Signature validation bypass
SimpleSAMLphp allows timing side-channel attacks
SimpleSAMLphp Use of insecure connection charset (sqlauth module)
SimpleSAMLphp Invalid token creation and validation
simpleSAMLphp incorrectly handles XML encryption
Information disclosure of source code in SimpleSAMLphp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.