CVE-2025-44023

An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute arbitrary via the accountmgr.cgi-cgichgadminpw components...

Linux Distros Unpatched Vulnerability : CVE-2024-52792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LDAP Account Manager LAM is a php webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In affected versions LAM does...

Linux Distros Unpatched Vulnerability : CVE-2024-23333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LDAP Account Manager LAM is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to specify arbitrary paths for log...

CVE-2025-25299

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting XSS vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within...

CVE-2022-24851

LDAP Account Manager LAM is an open source web frontend for managing entries stored in an LDAP directory. The profile editor tool has an edit profile functionality, the parameters on this page are not properly sanitized and hence leads to stored XSS attacks. An authenticated user can store XSS...

CVE-2024-23333

LDAP Account Manager LAM is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to specify arbitrary paths for log files. Prior to version 8.7, an attacker could exploit this by creating a PHP file and cause LAM to log some PHP code to this file. When th...

CVE-2024-40676

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2025-2592 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a confused deputy in the checkKeyIntent function of AccountManagerService.java, allowing a possible bypass of intent security checks. This could lead to the...

CVE-2024-49724

In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2024-49744

In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitatio...

PT-2025-2857 · Unknown · Accountmanagerservice

Name of the Vulnerable Software and Affected Versions: AccountManagerService affected versions not specified Description: The issue is related to a possible way to bypass parcel mismatch mitigation due to unsafe deserialization in the checkKeyIntentParceledCorrectly function of...

The vulnerability of the Security Account Manager (SAM) on Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Security Account Manager SAM on Windows operating systems is related to mutual blocking of execution threads. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2025-21313

Windows Security Account Manager SAM Denial of Service Vulnerability...

CVE-2025-21313 Windows Security Account Manager (SAM) Denial of Service Vulnerability

...

CVE-2025-21313 Windows Security Account Manager (SAM) Denial of Service Vulnerability

...

CVE-2025-21313

CVE-2025-21313 corresponds to a Windows SAM Denial-of-Service vulnerability. The connected sources identify the affected component as Windows Security Account Manager (SAM) and classify the impact as Denial of Service (DoS) with CVSS v3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Expl...

Windows Security Account Manager (SAM) Denial of Service Vulnerability

...

Microsoft Windows Security Account Manager 安全漏洞

Microsoft Windows Security Account Manager is a Windows security account manager from Microsoft USA that is used to store user passwords. It can be used to authenticate local and remote users. A security vulnerability exists in Microsoft Windows Security Account Manager. An attacker could exploit...

CVE-2024-12802

SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN User Principal Name and SAM Security Account Manager account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and...

SSL-VPN MFA Bypass Due to UPN and SAM Account Handling in Microsoft AD

SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN User Principal Name and SAM Security Account Manager account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and...