CVE-2020-12674

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

CVE-2020-12674

CVE-2020-12674 affects Dovecot before 2.3.11.3. The flaw arises in the Remote Passphrase Authentication (RPA) handling, where a zero-length input is mishandled, causing the authentication service to crash. This is listed alongside CVE-2020-12100 and CVE-2020-12673 in multiple advisories. Remediat...

CVE-2020-12674

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

CVE-2020-12673

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

CVE-2020-12673

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

CVE-2020-12674

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

CVE-2020-12673: Out-of-bounds Read

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

CVE-2020-12674: Out-of-bounds Read

In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...

ai.ylyue:yue-library-auth-service (>=j8.2.2.0, <=2.1.0), ai.ylyue:yue-library-data-redis (>=finchley.sr4, <=greenwich.sr2.1) +3422 more potentially affected by CVE-2018-1000613 via org.bouncycastle:bcprov-jdk15on (>=1.57, <=1.59)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.57, =j8.2.2.0, =finchley.sr4, =1.1.1.release, =1.1.1.release, =2.0.8, =2.0.8, =2.0.8, =2.4, =0.6.0, =1.0.7, =0.5.0, =0.1.0, =1.0.0, =3.0.3 and more Source cves: CVE-2018-1000613 Source advisory: GHSA-4446-656P-F54G...

CVE-2017-15700

A flaw in the org.apache.sling.auth.core.AuthUtilisRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials...

Sysax Multi Server 6.40 - SSH Component Denial of Service

''' Exploit title: Sysax Multi Server 6.40 ssh component denial of service vulnerability Date: 29-8-2015 Vendor homepage: http://www.sysax.com Software Link: http://www.sysax.com/download/sysaxservsetup.msi Version: 6.40 Author: 3unnym00n Details: ---------------------------------------------- by...