Read the docs

Janrain

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Janrain records in CISA KEV

No Janrain vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Php-openid 3 records MEDIUM Rpx 2 records LOW Ruby-openid 1 record LOW

Records

3 records in Php-openid · all components

TI-2016-01880 CVE-2016-2049 · GHSA-w7j5-jxx6-p7j4

examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly…

Priority MEDIUM 42

examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_NAME element in the SERVER superglobal array, which might allow remote attackers…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02171 Published 2016-02-01 No fix listed CWE-284
TI-2013-04122 CVE-2013-4701 · GHSA-5qp6-78pr-gv8c

Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to…

Priority LOW 38

Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02997 Published 2013-08-21 Fixed in 2.3.0, 6.2.6 CWE-400
TI-2011-03264 CVE-2011-3707 · GHSA-q5wh-wxwj-v2j3

JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain…

Priority LOW 26

JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by A…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01581 Published 2011-09-23 No fix listed CWE-200
Open these records in search →