CVEs published by Duo Security, Inc.

CVEs published by Duo Security, Inc. (CVE Numbering Authority). 5 tracked.

• CVE-2018-7340 HIGH 7.5 UPGRADE Duo Network Gateway 1.2.9 and earlier may incorrectly utilize the results of XML DOM traversal and canonicaliz
• CVE-2017-11430 HIGH 7.7 UPGRADE OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonic
• CVE-2017-11429 HIGH 7.7 UPGRADE Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization
• CVE-2017-11428 HIGH 7.7 UPGRADE OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicaliza
• CVE-2017-11427 HIGH 7.7 UPGRADE OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicaliz

← Back to latest CVEs