Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:58:39 +0000 cnvd-2017-31284 https://cve.radiocsirt.org/vuln/cnvd-2017-31284 cnvd-2017-31284 https://cve.radiocsirt.org/vuln/cnvd-2017-31284 EUVD-2026-77374 https://cve.radiocsirt.org/vuln/euvd-2026-77374 EUVD-2026-77374 https://cve.radiocsirt.org/vuln/euvd-2026-77374 fkie_cve-2017-12868 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12868 <p>The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.</p> <p>The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12868 GHSA-j96g-47x2-46hv — SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module https://cve.radiocsirt.org/vuln/ghsa-j96g-47x2-46hv <p><strong>Affected:</strong> Packagist: simplesamlphp/simplesamlphp</p> <p>The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.</p> <p><strong>Affected:</strong> Packagist: simplesamlphp/simplesamlphp</p> <p>The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.</p> https://cve.radiocsirt.org/vuln/ghsa-j96g-47x2-46hv gsd-2017-12868 https://cve.radiocsirt.org/vuln/gsd-2017-12868 gsd-2017-12868 https://cve.radiocsirt.org/vuln/gsd-2017-12868 UBUNTU-CVE-2017-12868 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12868 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: simplesamlphp</p> <p>The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: simplesamlphp</p> <p>The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12868