71 matches found
ai.foxpay.api:foxpay-sdk (>=1.0, <=1.1), ai.genauth:genauth-java-sdk (3.1.11) +2334 more potentially affected by CVE-2023-42276 via cn.hutool:hutool-core (>=5.0.0, <=5.8.21)
cn.hutool:hutool-core MAVEN version =5.0.0, =1.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =1.0.2, =1.0.4 and more Source cves: CVE-2023-42276 Source advisory: GHSA-RXGF-R843-G53H...
SUSE CVE-2020-12674
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...
MAL-2022-3776 Malicious code in idnnnms-widget-auth-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2d88993f3efd7188328e5518c6b2c91a51f857df272820e8a2c4fced28c1fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ai.ylyue:yue-library-auth-client (2.1.0), ai.ylyue:yue-library-auth-service (2.1.0) +369 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.1.11.release)
org.springframework:spring-web MAVEN version 5.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.ylyue:yue-library-auth-client 2.1.0 - ai.ylyue:yue-library-auth-service 2.1.0 -...
ai.ylyue:yue-library-auth-client (j11.2.6.1), ai.ylyue:yue-library-auth-service (j11.2.6.1) +3455 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.20)
org.springframework:spring-web MAVEN version 5.3.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.ylyue:yue-library-auth-client j11.2.6.1 - ai.ylyue:yue-library-auth-service j11.2.6.1 -...
ai.ylyue:yue-library-auth-client (>=j8.2.3.2, <=j11.2.3.2), ai.ylyue:yue-library-auth-service (>=j8.2.3.2, <=j11.2.3.2) +1739 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.2.12.release)
org.springframework:spring-web MAVEN version 5.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.ylyue:yue-library-auth-client =j8.2.3.2, =j8.2.3.2, =j8.2.3.2, =j8.2.3.2, =j8.2.3.2,...
ai.ylyue:yue-library-auth-client (>=j8.2.3.3, <=j11.2.3.3), ai.ylyue:yue-library-auth-service (>=j8.2.3.3, <=j11.2.3.3) +418 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.2.14.release)
org.springframework:spring-web MAVEN version 5.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.ylyue:yue-library-auth-client =j8.2.3.3, =j8.2.3.3, =j8.2.3.3, =j8.2.3.3, =j8.2.3.3,...
ai.ylyue:yue-library-auth-client (>=j8.2.4.0, <=j11.2.4.0), ai.ylyue:yue-library-auth-service (>=j8.2.4.0, <=j11.2.4.0) +1443 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-core (>=5.4.0, <=5.4.6)
org.springframework.security:spring-security-core MAVEN version =5.4.0, =j8.2.4.0, =j8.2.4.0, =0.1.0-alpha, =0.1.0-alpha, =2.0.3, =2.0.3, =2.0.3, =1.0.0, =0.0.1, =8.1.0.371, =8.1.0.304, =8.1.0.585.9 and more Source cves: CVE-2021-22119 Source advisory: OSV:GHSA-W9JG-GVGR-354M...
NewStart CGSL MAIN 6.02 : dovecot Multiple Vulnerabilities (NS-SA-2021-0054)
The remote NewStart CGSL host, running version MAIN 6.02, has dovecot packages installed that are affected by multiple vulnerabilities: - In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a...
PYSEC-2021-44
Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the ZODB Role Manager plugin if the site uses this...
Jens Vagelpohl Products.PluggableAuthService 输入验证错误漏洞
Jens Vagelpohl Products.PluggableAuthService is an open source application by Jens Vagelpohl. The product defines a fully pluggable user folder for use on all Zope sites. A security vulnerability exists in Products.PluggableAuthService before version 2.6.0, which stems from an open redirection...
EulerOS 2.0 SP2 : dovecot (EulerOS-SA-2020-2340)
According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource...
Amazon Linux AMI : dovecot (ALAS-2020-1435)
The version of dovecot installed on the remote host is prior to 2.2.36-6.21. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1435 advisory. A flaw was found in dovecot. A remote attacker could cause a denial of service by repeatedly sending emails containing...
EulerOS 2.0 SP8 : dovecot (EulerOS-SA-2020-2152)
According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds...
EulerOS 2.0 SP3 : dovecot (EulerOS-SA-2020-2117)
According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds...
Oracle Linux 8 : dovecot (ELSA-2020-3713)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3713 advisory. - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1866755 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation...
Oracle Linux 7 : dovecot (ELSA-2020-3617)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3617 advisory. - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1871841 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation...
ALPINE-CVE-2020-12673
In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...
