Login Request a demo
OP
Product
Openid
by Openid · last CVE May 21, 2021
4
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 1Low 0
Severity
All severities4Critical0High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Openid to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2008-3280
5.9
4%
May 21
It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator (CVE-2008-0166)
Affected: All versions, or not specified
CVE-2007-5173
–
3%
Oct 3
PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the…
Affected: 0.2.0
CVE-2007-1651
–
1%
Mar 24
Cross-site request forgery (CSRF) vulnerability in OpenID allows remote attackers to restore the login session of a user on an OpenID enabled site via unspecified vectors related…
Affected: All versions, or not specified
CVE-2007-1652
–
1%
Mar 24
OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list…
Affected: All versions, or not specified
Showing 4