Export limit exceeded: 354376 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-13933 3 Apache, Debian, Redhat 4 Shiro, Debian Linux, Jboss Amq and 1 more 2024-11-21 7.5 High
Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.
CVE-2020-11989 2 Apache, Redhat 2 Shiro, Jboss Fuse 2024-11-21 9.8 Critical
Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
CVE-2019-12422 2 Apache, Redhat 2 Shiro, Jboss Fuse 2024-11-21 7.5 High
Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.