Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 10:48:55 +0000 cnvd-2015-06501 https://cve.radiocsirt.org/vuln/cnvd-2015-06501 cnvd-2015-06501 https://cve.radiocsirt.org/vuln/cnvd-2015-06501 EUVD-2026-93352 https://cve.radiocsirt.org/vuln/euvd-2026-93352 EUVD-2026-93352 https://cve.radiocsirt.org/vuln/euvd-2026-93352 fkie_cve-2015-5372 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5372 <p>The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.</p> <p>The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5372 GHSA-r97q-42f3-866f https://cve.radiocsirt.org/vuln/ghsa-r97q-42f3-866f <p>The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.</p> <p>The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-r97q-42f3-866f gsd-2015-5372 https://cve.radiocsirt.org/vuln/gsd-2015-5372 gsd-2015-5372 https://cve.radiocsirt.org/vuln/gsd-2015-5372