Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 8.8 CVE-2016-2049 examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_NAME elem… Php Openid Mitigation only Fix from $1,9502016-02-01 HIGH 7.5 CVE-2013-4701 Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, o… Php Openid after 2.2.2 Fix from $1,9502013-08-21 MEDIUM 5.0 CVE-2012-2296 The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage … Rpx Patch available Fix from $1,6002012-07-25 MEDIUM 5.0 CVE-2011-3707 JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which … Php Openid No fix yet Fix from $1,6002011-09-23 MEDIUM 6.8 CVE-2011-0771 The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticated users t… Rpx Patch available Fix from $1,6002011-02-04