OP
Vendor
Openid
7
CVEs
0
On KEV
0
New 30D
Products
OP5.9
Openid
Openid
4 CVEs0 on KEV0 new
OC6.1
Openid Connect
Openid
1 CVEs0 on KEV0 new
OP–
Openid4java
Openid
1 CVEs0 on KEV0 new
RU9.8
Ruby-openid
Openid
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2008-3280 | OP Openid Openid | 5.9 | May 21 | It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator (CVE-2008-0166) |
| CVE-2019-11027 | RU Ruby-openid Openid | 9.8 | Jun 10 | Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw |
| CVE-2019-9837 | OC Openid Connect Openid | 6.1 | Mar 15 | Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization… |
| CVE-2011-4314 | OP Openid4java Openid | – | Jan 27 | message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly… |
| CVE-2007-5173 | OP Openid Openid | – | Oct 3 | PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the… |
| CVE-2007-1651 | OP Openid Openid | – | Mar 24 | Cross-site request forgery (CSRF) vulnerability in OpenID allows remote attackers to restore the login session of a user on an OpenID enabled site via unspecified vectors related… |
| CVE-2007-1652 | OP Openid Openid | – | Mar 24 | OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list… |