https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:03:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-09507 bdu:2024-09507 https://cve.radiocsirt.org/vuln/bdu:2024-09507 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0952 certfr-2024-avi-0952 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0952 https://cve.radiocsirt.org/vuln/euvd-2026-199726 EUVD-2026-199726 https://cve.radiocsirt.org/vuln/euvd-2026-199726 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10318 <p>A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim&#39;s session to an attacker-controlled account. As a result, although the attacker cannot log in as the victim, they can force the session to associate it with the attacker-controlled account, leading to potential misuse of the victim&#39;s session.</p> <p>A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim&#39;s session to an attacker-controlled account. As a result, although the attacker cannot log in as the victim, they can force the session to associate it with the attacker-controlled account, leading to potential misuse of the victim&#39;s session.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10318 https://cve.radiocsirt.org/vuln/ghsa-8mqv-23wv-wqfg <p>A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim&#39;s session to an attacker-controlled account. As a result, although the attacker cannot log in as the victim, they can force the session to associate it with the attacker-controlled account, leading to potential misuse of the victim&#39;s session.</p> <p>A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim&#39;s session to an attacker-controlled account. As a result, although the attacker cannot log in as the victim, they can force the session to associate it with the attacker-controlled account, leading to potential misuse of the victim&#39;s session.</p> https://cve.radiocsirt.org/vuln/ghsa-8mqv-23wv-wqfg https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3364 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in der NGINX OpenID Connect Referenzimplementierung ausnutzen, um Benutzerrechte zu erlangen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in der NGINX OpenID Connect Referenzimplementierung ausnutzen, um Benutzerrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3364