Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

...

Microsoft Azure uAMQP Security Vulnerability

Microsoft Azure uAMQP is a library from Microsoft Corporation USA. A security vulnerability exists in versions of Microsoft Azure uAMQP prior to 2023-2-07, which stems from a double release issue that could lead to an RCE when incorrect AMQPVALUE failure states are processed...

CVE-2023-28862

An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling during a password check allow attackers to bypass 2FA verification. Any plugin that tries to deny session creation after the store step does not deny an...

Session fixation

An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling during a password check allow attackers to bypass 2FA verification. Any plugin that tries to deny session creation after the store step does not deny an...