CVE-2025-27371

In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to au ...

Continue Reading
BIT-ODOO-2024-12368

Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other...Read More ...

Continue Reading
CVE-2025-1801

No description is available for this CVE. Mitigation Below are the mitigation steps to avoid the flaw from happening, still it is indicated to update the product after the fix is available. 1) set G ...

Continue Reading
CVE-2025-23046

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an O ...

Continue Reading
CVE-2024-12368

Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other...Read More ...

Continue Reading
CVE-2025-23046

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an O ...

Continue Reading
UBUNTU-CVE-2025-23046

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an O ...

Continue Reading
UBUNTU-CVE-2024-12368

Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other...Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: