搜索结果
关于「single_sign-on」的漏洞数据
| AVD编号 | 漏洞名称 | 漏洞类型 | 披露时间 | 漏洞状态 |
|---|---|---|---|---|
| AVD-2026-28369 | Undertow Header前导空格剥离请求走私漏洞(CVE-2026-28369) | 2026-03-28 | ||
| AVD-2026-28367 | Undertow HTTP请求走私漏洞(CVE-2026-28367) | 2026-03-28 | ||
| AVD-2026-28368 | Undertow HTTP请求走私漏洞(CVE-2026-28368) | 2026-03-28 | ||
| AVD-2026-3121 | Keycloak 权限提升漏洞(CVE-2026-3121) | 2026-03-27 | ||
| AVD-2026-4874 | Keycloak 刷新令牌请求 SSRF 漏洞(CVE-2026-4874) | 2026-03-26 | ||
| AVD-2026-3260 | Undertow GET请求解析DoS漏洞(CVE-2026-3260) | 2026-03-24 | ||
| AVD-2026-4366 | Keycloak 客户端配置 SSRF 漏洞(CVE-2026-4366) | 2026-03-18 | ||
| AVD-2026-3009 | Keycloak 身份提供者禁用绕过漏洞(CVE-2026-3009) | 2026-03-06 | ||
| AVD-2025-12543 | Undertow-core Host header验证缺陷漏洞 (CVE-2025-12543) | 2026-01-08 | ||
| AVD-2025-9784 | Undertow：undertow madeyoureset http/2 ddos 漏洞 (CVE-2025-9784) | 2025-09-02 | ||
| AVD-2024-8883 | Keycloak：易受攻击的重定向 uri 验证导致开放重定向（CVE-2024-8883） | 2024-09-20 | ||
| AVD-2023-6841 | Improper Handling of Extra Values (CVE-2023-6841) | 2024-09-10 | ||
| AVD-2024-7341 | Session Fixation (CVE-2024-7341) | 2024-09-09 | ||
| AVD-2024-4629 | Improper Enforcement of a Single, Unique Action (CVE-2024-4629) | 2024-09-03 | ||
| AVD-2024-7885 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2024-7885) | 2024-08-07 | ||
| AVD-2024-1132 | Keycloak：重定向验证中的路径横向 (CVE-2024-1132) | 2024-04-17 | ||
| AVD-2024-1635 | Undertow：多次关闭与 wildfly-http-client 协议的连接后出现内存不足错误 (CVE-2024-1635) | 2024-02-20 | ||
| AVD-2023-1932 | CVE-2023-1932 | 2024-02-07 | ||
| AVD-2023-6291 | Red Hat Keycloak 其他漏洞(CVE-2023-6291) | 2024-01-26 | ||
| AVD-2023-2585 | Red Hat Keycloak 安全漏洞(CVE-2023-2585) | 2023-12-21 | ||
| AVD-2023-6927 | Keycloak：通过“form_post.jwt”jarm 响应模式打开重定向 (CVE-2023-6927) | 2023-12-19 | ||
| AVD-2023-48795 | openssh 安全漏洞 (CVE-2023-48795) | 2023-12-19 | ||
| AVD-2023-6134 | Red Hat Keycloak 安全漏洞(CVE-2023-6134) | 2023-12-15 | ||
| AVD-2023-6563 | Keycloak：脱机会话令牌 dos (CVE-2023-6563) | 2023-12-15 | ||
| AVD-2023-5379 | Undertow：ajp 请求关闭超过 maxrequestsize 的连接 (CVE-2023-5379) | 2023-12-13 | ||
| AVD-2023-44487 | HTTP/2 Rapid Reset 拒绝服务漏洞 (CVE-2023-44487) | 2023-10-13 | ||
| AVD-2023-2422 | Oauth 客户端模拟 (CVE-2023-2422) | 2023-10-04 | ||
| AVD-2023-3223 | 由于 @multipartconfig 处理而导致内存不足错误 (CVE-2023-3223) | 2023-09-27 | ||
| AVD-2022-4361 | 在 SAML 和 OIDC 上验证 URI 方案时，Keycloak 容易受到跨站点脚本攻击 (CVE-2022-4361) | 2023-07-08 | ||
| AVD-2023-1664 | Keycloak 安全特性绕过漏洞(CVE-2023-1664) | 2023-03-27 |