squid: buffer-over-read in SSPI and SMB authentication

A flaw was found in Squid. An incorrect integer overflow protection in the Squid SSPI and SMB authentication helpers is vulnerable to a buffer overflow attack, resulting in information disclosure...

The vulnerability of the Cyber Recovery data protection tool lies in its authentication procedures’ flaws, which allow attackers to gain access to the API interface.

The vulnerability of the Cyber Recovery data protection tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the API interface...

The vulnerability in the transport.py component of the SSHv2 protocol library for Python Paramiko allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the transport.py component in the SSHv2 protocol library for Python Paramiko is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the Apex One antivirus software is related to deficiencies in its authentication process. This allows unauthorized users to gain access to protected information and circumvent security restrictions.

The vulnerability of the Apex One antivirus software is related to deficiencies in the authentication process when processing request parameters. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and circumvent security...

The vulnerability of the Samba network communication software package is related to deficiencies in authentication procedures. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Samba network communication package is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Kubernets Rancher cluster management software is related to deficiencies in the authentication process, which allows attackers to elevate their privileges.

The vulnerability of Kubernets Rancher cluster management software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Video Gallery plugin of the WordPress content management system allows attackers to bypass existing security restrictions.

The vulnerability of the Video Gallery plugin in the WordPress content management system is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the KDC kpasswd service in the Samba networking software allows a hacker to elevate their privileges within the system.

The vulnerability of the KDC kpasswd service in the Samba networking software package is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to elevate privileges within the system...

The vulnerability of the Open AMT Cloud Toolkit software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the Open AMT Cloud Toolkit software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain increased privileges...

The vulnerability of Intel SSD microprogramming software is related to implementation errors in authentication procedures. This allows attackers to carry out “man-in-the-middle” attacks and disclose sensitive information.

The vulnerability of Intel SSD microprogramming software is related to errors in the implementation of authentication procedures. Exploiting this vulnerability can allow attackers to carry out a “man-in-the-middle” attack and expose the protected information...

The vulnerability of the SAP Enable Now Manager platform, related to deficiencies in the authentication process, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity.

The vulnerability of the SAP Enable Now Manager platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its integrity...

The vulnerability of the Jenkins Files Found Trigger Plugin is related to deficiencies in authentication procedures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Files Found Trigger Plugin is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins rhnpush-plugin, related to deficiencies in the authentication process, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Jenkins rhnpush-plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins Compuware Source Code Download plugin for Endevor, PDS, and ISPW plugins is related to deficiencies in the authentication process, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Compuware Source Code Download plugin for Endevor, PDS, and ISPW plugins is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins OpenShift Deployer Plugin, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Deployer Framework Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins Buckminster Plugin is related to deficiencies in the authentication process, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Buckminster Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins Coverity Plugin, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Coverity Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins Repository Connector Plugin, related to deficiencies in the authentication process, allows attackers to disclose sensitive information about the file system.

The vulnerability of the Jenkins Repository Connector Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information about the file system...

The vulnerability of the Jenkins Compuware Topaz Utilities Plugin, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Jenkins Compuware Topaz Utilities Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins HashiCorp Vault Plugin, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins HashiCorp Vault Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...