Lucene search
+L

304 matches found

BDU FSTEC
BDU FSTEC
added 2021/02/09 12:00 a.m.12 views

The vulnerability of the Windows operating system’s network authentication protocol, NT LAN Manager (NTLM), allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s network authentication protocol, NTLM, is related to security flaws in its mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.01299EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:00 a.m.10 views

The vulnerability of the NTLM protocol implemented by the Windows operating system lies in the lack of protection for service data, which allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the NTLM protocol implemented by the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

7.8CVSS7.5AI score0.0938EPSS
SaveExploits1References2
OSV
OSV
added 2021/01/12 8:15 p.m.5 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS6.6AI score0.01299EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/12 8:15 p.m.25 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS6.6AI score0.01299EPSS
SaveExploits0References2
CVE
CVE
added 2021/01/12 7:42 p.m.125 views

CVE-2021-1676

Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.

5.5CVSS6.6AI score0.01299EPSS
SaveExploits0References2Affected Software8
Microsoft CVE
Microsoft CVE
added 2021/01/12 8:00 a.m.55 views

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

...

5.5CVSS5.7AI score0.01299EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/01/12 12:00 a.m.18 views

Microsoft NT LAN Manager 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows/Windows Server NT Lan Manager Datagra...

5.5CVSS6.6AI score0.01299EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/01/12 12:00 a.m.174 views

KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

9.8CVSS7.2AI score0.0938EPSS
SaveExploits3References56
Positive Technologies
Positive Technologies
added 2021/01/12 12:00 a.m.6 views

PT-2021-1607

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Description The issue is related to a security feature bypass vulnerability in the NTLM protocol implementation in Windows. This vulnerability can be exploited by a remote attacker to gain unauthoriz...

8.8CVSS7.3AI score0.0938EPSS
SaveExploits1References15
VulnCheck KEV
VulnCheck KEV
added 2020/10/20 12:00 a.m.7 views

VulnCheck KEV: CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features. To...

5.9CVSS7AI score0.48043EPSS
SaveExploits6References1
RedHat Linux
RedHat Linux
added 2020/09/14 12:48 p.m.6 views

dovecot: Out of bound reads in dovecot NTLM implementation

A flaw was found in dovecot. An out-of-bounds read flaw was found in the way dovecot handled NTLM authentication allowing an attacker to crash the dovecot auth process repeatedly preventing login. The highest threat from this vulnerability is to system availability...

7.5CVSS6.7AI score0.06187EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/09/14 12:44 p.m.6 views

dovecot: Out of bound reads in dovecot NTLM implementation

A flaw was found in dovecot. An out-of-bounds read flaw was found in the way dovecot handled NTLM authentication allowing an attacker to crash the dovecot auth process repeatedly preventing login. The highest threat from this vulnerability is to system availability...

7.5CVSS6.7AI score0.06187EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/09/10 1:03 p.m.8 views

dovecot: Out of bound reads in dovecot NTLM implementation

A flaw was found in dovecot. An out-of-bounds read flaw was found in the way dovecot handled NTLM authentication allowing an attacker to crash the dovecot auth process repeatedly preventing login. The highest threat from this vulnerability is to system availability...

7.5CVSS6.7AI score0.06187EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/09/03 10:41 a.m.6 views

dovecot: Out of bound reads in dovecot NTLM implementation

A flaw was found in dovecot. An out-of-bounds read flaw was found in the way dovecot handled NTLM authentication allowing an attacker to crash the dovecot auth process repeatedly preventing login. The highest threat from this vulnerability is to system availability...

7.5CVSS6.7AI score0.06187EPSS
SaveExploits1References5
OSV
OSV
added 2020/08/12 4:15 p.m.2 views

DEBIAN-CVE-2020-12673

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

7.5CVSS7.1AI score0.06187EPSS
SaveExploits1References1
OSV
OSV
added 2020/07/29 4:15 p.m.7 views

CVE-2020-13699

TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10: --play URL. An attacker could force a victim to send an NTLM authentication request and either...

8.8CVSS7.6AI score0.25789EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2020/07/02 12:00 a.m.28 views

F5 Networks BIG-IP : BIG-IP APM Edge Client vulnerability (K97733133)

When a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection. CVE-2020-5893 Impact An attacker can use a man-in-the-middle MITM attack by deploying a...

4.3CVSS5.2AI score0.00561EPSS
SaveExploits0References2
OSV
OSV
added 2020/06/04 5:15 p.m.9 views

CVE-2018-21239

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...

5.3CVSS5.8AI score0.00817EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/11 2:15 p.m.2 views

DEBIAN-CVE-2020-12783

Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c...

7.5CVSS8.1AI score0.04553EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.11 views

The vulnerability of the NTLM authentication module in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the NTLM authentication module in the RDP client FreeRDP arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

7.8CVSS6.9AI score0.05238EPSS
SaveExploits1References7Affected Software5
Rows per page
Query Builder