Lucene search
K

359 matches found

Snyk
Snyk
added 2025/08/13 2:46 p.m.2 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the ngxmailsmtpmodule during the NGINX SMTP authentication process. An attacker can access sensitive information by sending specially crafted SMTP requests that trigger an out-of-bounds read. Note: The issue affect...

6.3CVSS6.5AI score0.00371EPSS
Exploits0References2
NVD
NVD
added 2025/08/12 6:15 p.m.3 views

CVE-2025-50159

Use after free in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an authorized attacker to elevate privileges locally...

7.3CVSS0.00527EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/12 5:10 p.m.11 views

CVE-2025-53778 Windows NTLM Elevation of Privilege Vulnerability

...

8.8CVSS0.36074EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/12 5:10 p.m.7 views

CVE-2025-50159 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability

...

7.3CVSS0.00527EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/12 5:10 p.m.2 views

CVE-2025-50159 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability

...

7.3CVSS7.2AI score0.00527EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:0 a.m.3 views

Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability

Use after free in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an authorized attacker to elevate privileges locally...

7.3CVSS7.8AI score0.00527EPSS
Exploits0
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.4 views

Microsoft NTLM 授权问题漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. An authorization problem vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to elevate privileges. The...

8.8CVSS6.5AI score0.36074EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.3 views

PT-2025-32782 · Unknown +1 · Ppp Eap-Tls +1

Name of the Vulnerable Software and Affected Versions: Remote Access Point-to-Point Protocol PPP EAP-TLS affected versions not specified Description: A use after free issue exists in Remote Access Point-to-Point Protocol PPP EAP-TLS. This allows a locally authorized attacker to elevate privileges...

7.3CVSS7AI score0.00527EPSS
Exploits0References6
Snyk
Snyk
added 2025/08/06 12:31 p.m.2 views

Improper Neutralization

Overview github.com/hashicorp/vault/builtin/credential/ldap is a package ldap for Hashicorp. Affected versions of this package are vulnerable to Improper Neutralization in the ldap authentication method when usernameasalias is enabled and a user has multiple CNs that are equal except for leading ...

8.5CVSS7.1AI score0.00468EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:15 p.m.6 views

CVE-2020-25183

Medtronic MyCareLink Smart 25000 all versions contain an authentication protocol vuln where the method used to auth between MCL Smart Patient Reader and MyCareLink Smart mobile app is vulnerable to bypass. This vuln allows attacker to use other mobile device or malicious app on smartphone to auth...

8.8CVSS7AI score0.00787EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:39 a.m.4 views

CVE-2019-3981

MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password...

4.3CVSS7.1AI score0.01141EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:29 a.m.3 views

CVE-2017-2488

A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able to capture cleartext passwords...

7.5CVSS7.2AI score0.00593EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:33 p.m.3 views

CVE-2008-1113

Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol PEAP, does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle MITM attacks...

7.8CVSS7.1AI score0.00887EPSS
Exploits0References1
Packet Storm News
Packet Storm News
added 2025/04/28 12:0 a.m.5 views

Fast and Robust Speckle Pattern Authentication by Scale Invariant Feature Transform Algorithm in Physical Unclonable Functions

Nowadays, due to the growing phenomenon of forgery in many fields, the interest in developing new anti-counterfeiting device and cryptography keys, based on the Physical Unclonable Functions PUFs paradigm, is widely increased. PUFs are physical hardware with an intrinsic, irreproducible disorder...

6.9AI score
Exploits0
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.1 views

Microsoft Windows Kerberos 安全漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation USA.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A security vulnerability...

7.1CVSS8.3AI score0.04008EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2025/03/14 7:0 a.m.4 views

GSS-NTLMSSP vulnerable to incorrect free when decoding target information

...

7.5CVSS7.2AI score0.01103EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/03/14 7:0 a.m.3 views

GSS-NTLMSSP vulnerable to memory leak when parsing usernames

...

7.5CVSS7.2AI score0.01103EPSS
Exploits0
OSV
OSV
added 2025/03/11 5:16 p.m.4 views

CVE-2025-24996

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS7.3AI score0.0119EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.2 views

Microsoft NTLM 安全漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to perform spoofing attacks. The followin...

6.5CVSS8.5AI score0.0119EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.4 views

Microsoft NTLM 安全漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to perform spoofing attacks. The followin...

6.5CVSS7.8AI score0.58974EPSS
Exploits18References4
Rows per page
Query Builder