https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T10:48:57.519636+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-06501 cnvd-2015-06501 2026-10-18T10:48:57.524849+00:00 cnvd-2015-06501 https://cve.radiocsirt.org/vuln/euvd-2026-93352 EUVD-2026-93352 2026-10-18T10:48:57.524883+00:00 EUVD-2026-93352 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5372 fkie_cve-2015-5372 2026-10-18T10:48:57.524897+00:00

The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.

 https://cve.radiocsirt.org/vuln/ghsa-r97q-42f3-866f GHSA-r97q-42f3-866f 2026-10-18T10:48:57.524925+00:00

The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.

 https://cve.radiocsirt.org/vuln/gsd-2015-5372 gsd-2015-5372 2026-10-18T10:48:57.524941+00:00 gsd-2015-5372