Browse CVEs

HIGH 7.5 CVE-2018-20000 Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to webdav/ser… Bw Webdav 4.0.3+ Fix from $1,9502018-12-10 HIGH 8.8 CVE-2014-2296 XML external entity (XXE) vulnerability in java/org/jasig/cas/util/SamlUtils.java in Jasig CAS server before 3.4.12.1 and 3.5.x before 3.5.2.1, when … Cas Server 3.4.12.1 / 3.5.2.1+ Fix from $1,9502018-07-20 MEDIUM 6.5 CVE-2017-1000221 In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the … Opencast after 2.2.3 Fix from $1,6002017-11-17 HIGH 8.1 CVE-2017-1000071 Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS… Phpcas Mitigation only Fix from $1,9502017-07-17 HIGH 7.5 CVE-2015-1169 Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as … Central Authentication Service after 3.5.2 Fix from $1,9502015-02-10 MEDIUM 5.8 CVE-2012-5583 phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X… Phpcas after 1.3.1 Fix from $1,6002014-06-06 MEDIUM 6.4 CVE-2010-3692 Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote attackers … Phpcas after 1.1.2 Fix from $1,6002010-10-07