Lucene search
+L

3587 matches found

BDU FSTEC
BDU FSTEC
added 2022/05/05 12:00 a.m.10 views

Vulnerability of the Server component: PAM Auth Plugin of the MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the MySQL Server database management system’s PAM Auth Plugin relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information using the FIDO network protocol...

7.1CVSS6.7AI score0.02092EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/04/21 4:15 a.m.8 views

UBUNTU-CVE-2016-20014

In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...

9.8CVSS5.8AI score0.01252EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.6 views

pam_tacplus 安全漏洞

pamtacplus is a PAM module for authenticating users via TACACS + Terminal Access Controller Access Control System by the individual developer Paweł Krawczyk in the UK. A security vulnerability exists in pamtacplus before 1.4.1, which stems from the fact that pamsmacctmgmt does not zero out the ar...

9.8CVSS8.3AI score0.01252EPSS
SaveExploits0References3
NVD
NVD
added 2022/04/19 9:15 p.m.34 views

CVE-2022-21457

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

5.9CVSS0.02092EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/19 9:15 p.m.6 views

CVE-2022-21457

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

5.9CVSS6.7AI score0.02092EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/04/19 9:15 p.m.34 views

Design/Logic Flaw

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

4.3CVSS5.5AI score0.02092EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/04/19 9:15 p.m.49 views

CVE-2022-21457

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

5.9CVSS6.7AI score0.02092EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/19 9:15 p.m.21 views

UBUNTU-CVE-2022-21457

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

5.9CVSS6.7AI score0.02092EPSS
SaveExploits0References4
CVE
CVE
added 2022/04/19 8:37 p.m.179 views

CVE-2022-21457

CVE-2022-21457 affects Oracle MySQL Server (component: PAM Auth Plugin). Affected versions: 8.0.28 and earlier. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to gain access to critical data or full MySQL Server data. The published CVSS indicates C...

5.9CVSS5.4AI score0.02092EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/19 8:37 p.m.34 views

CVE-2022-21457

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

5.9CVSS5.5AI score0.02092EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/04/19 8:37 p.m.21 views

CVE-2022-21457

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

5.9CVSS6.1AI score0.02092EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/04/08 12:00 a.m.56 views

Kronos Single Connect授权错误漏洞

Kronos Single Connect is a comprehensive privileged access management Pam software suite from Kronos Turkey. Designed to create a flexible, centrally managed and layered defense security architecture against insider threats, Kronos Single Connect has an authorization error vulnerability that coul...

5.3CVSS2.6AI score0.00993EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/04/07 12:00 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2022:1105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.3AI score0.00661EPSS
SaveExploits1References25
Positive Technologies
Positive Technologies
added 2022/03/29 12:00 a.m.5 views

PT-2022-4982 · Linux Pam +2 · Linux-Pam +2

Name of the Vulnerable Software and Affected Versions: Linux-PAM versions prior to 1.5.2-6.1 Description: The issue is related to the pam access.so module of the Linux-PAM package, which does not correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS...

10CVSS9.2AI score0.01264EPSS
SaveExploits0References19
NVD
NVD
added 2022/03/25 7:15 p.m.27 views

CVE-2022-1049

A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login...

8.8CVSS0.01953EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2022/03/25 7:15 p.m.30 views

CVE-2022-1049

A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login...

8.8CVSS7AI score0.01953EPSS
SaveExploits1References3
Prion
Prion
added 2022/03/25 7:15 p.m.21 views

Design/Logic Flaw

A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login...

6.5CVSS8.4AI score0.01953EPSS
SaveExploits1References3Affected Software2
Debian CVE
Debian CVE
added 2022/03/25 6:03 p.m.78 views

CVE-2022-1049

A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login...

8.8CVSS7.7AI score0.01953EPSS
SaveExploits1
CVE
CVE
added 2022/03/25 6:03 p.m.117 views

CVE-2022-1049

CVE-2022-1049 concerns the Pacemaker configuration tool (pcs) where the daemon allowed expired accounts and accounts with expired passwords to authenticate via PAM, enabling login for unprivileged expired accounts. Connected advisories/plugins reference affected packages across multiple distribut...

8.8CVSS8.4AI score0.01953EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/03/25 6:03 p.m.30 views

CVE-2022-1049

A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login...

8.8AI score0.01953EPSS
SaveExploits1References3
Rows per page
Query Builder