CO
Vendor
Connect2id
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-52428 | NJ Nimbus Jose+jwt Connect2id | 7.5 | Feb 11 | In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the… |
| CVE-2019-17195 | NJ Nimbus Jose+jwt Connect2id | 9.8 | Oct 15 | Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or… |
| CVE-2017-12974 | NJ Nimbus Jose+jwt Connect2id | 7.5 | Aug 20 | Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an… |
| CVE-2017-12973 | NJ Nimbus Jose+jwt Connect2id | 3.1 | Aug 20 | Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack |
| CVE-2017-12972 | NJ Nimbus Jose+jwt Connect2id | 7.5 | Aug 20 | In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by… |