Lucene search
+L

3573 matches found

CNNVD
CNNVD
added 2025/08/25 12:0 a.m.8 views

Securden Unified PAM 安全漏洞

Securden Unified PAM is a privileged access management software from Securden, Inc. A security vulnerability exists in Securden Unified PAM that stems from unauthenticated file upload functionality with path traversal, which could lead to remote code execution...

9.4CVSS7.8AI score0.09239EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2007-2768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSSH, when using OPIE One-Time Passwords in Everything for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a...

4.3CVSS7.2AI score0.08654EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-12210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debugfile, that file descriptor is not closed when a new process is...

8.1CVSS6.7AI score0.0187EPSS
SaveExploits1References2
OPENSUSE Linux
OPENSUSE Linux
added 2025/08/22 12:0 a.m.6 views

pam-1.7.1-3.1 on GA media (moderate)

pam-1.7.1-3.1 on GA media Announcement ID: openSUSE-SU-2025:15478-1 Rating: moderate Cross-References: CVE-2024-10041 CVSS scores: CVE-2024-10041 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2024-10041 SUSE : 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N...

5.7CVSS7.2AI score0.00265EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.7 views

TencentOS Server 4: pam (TSSA-2025:0538)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0538 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.8CVSS7.5AI score0.00438EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/21 12:0 a.m.3 views

OPENSUSE-SU-2025:15477-1 pam-1.7.1-3.1 on GA media

These are all security issues fixed in the pam-1.7.1-3.1 package on the GA media of openSUSE Tumbleweed...

4.7CVSS5.8AI score0.00265EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/20 6:32 a.m.7 views

ROOT-OS-DEBIAN-11-CVE-2025-6020 CVE-2025-6020 in rootio-pam - Patched by Root

Root has patched CVE-2025-6020 in the rootio-pam package for Root:Debian:11. Multiple fixed versions available...

7.8CVSS7.3AI score0.00438EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-2014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 5.7.32 and prior. Easily...

6.8CVSS5.6AI score0.02157EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/18 2:17 p.m.75 views

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2024-22365 DESCRIPTION: Linux-pam is vulnerable to a denial of service, caused by ...

8.4CVSS9.7AI score0.00887EPSS
SaveExploits2Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-23013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module PAM that can be deploy...

7.3CVSS8.4AI score0.00405EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-10963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick t...

7.4CVSS7AI score0.00775EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-24612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the selinux-policy aka Reference Policy package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled...

6.7CVSS5.5AI score0.00317EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/08/14 2:55 a.m.7 views

SUSE CVE-2025-8941

A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...

7CVSS6.5AI score0.00264EPSS
SaveExploits0References5
OSV
OSV
added 2025/08/13 3:15 p.m.5 views

DEBIAN-CVE-2025-8941

A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...

7.8CVSS7.7AI score0.00264EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2025/08/13 3:15 p.m.8 views

CVE-2025-8941

A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...

7.8CVSS7AI score0.00264EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/13 3:15 p.m.6 views

UBUNTU-CVE-2025-8941

A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...

7.8CVSS6.9AI score0.00264EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/13 2:42 p.m.104 views

CVE-2025-8941

CVE-2025-8941 affects linux-pam pam_namespace, which may mishandle user-controlled paths, enabling local privilege escalation via symlink attacks and race conditions. The issue is described as an incomplete/overlapping fix for CVE-2025-6020 and is reflected in multiple advisories across Red Hat, ...

7.8CVSS6.8AI score0.00264EPSS
SaveExploits0References19
Cvelist
Cvelist
added 2025/08/13 2:42 p.m.20 views

CVE-2025-8941 Linux-pam: incomplete fix for cve-2025-6020

A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...

7.8CVSS0.00264EPSS
SaveExploits0References19
Debian CVE
Debian CVE
added 2025/08/13 2:42 p.m.6 views

CVE-2025-8941

A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...

7.8CVSS7.7AI score0.00264EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/08/13 12:0 a.m.5 views

Linux-pam 路径遍历漏洞

Linux-pam is a pluggable-supported system authentication software for Linux from the Linux Foundation in the United States. Linux-pam suffers from a path traversal vulnerability that stems from the pamnamespace module improperly handling user-controlled paths, which could lead to elevation of...

7.8CVSS6.6AI score0.00264EPSS
SaveExploits0References5
Rows per page
Query Builder