本ページは stanford webauth に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2013-2106 | webauth before 4.6.1 has authentication credential disclosure | [email protected] | 7.5 | 1.58% | 2019-12-03 | 2026-06-16 |
| CVE-2009-2945 | weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history. | [email protected] | 4.3 | 0.86% | 2009-09-15 | 2026-06-16 |