Lucene search
+L

1477 matches found

OpenVAS
OpenVAS
added 2022/06/16 12:00 a.m.20 views

Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2022-1835)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.1AI score0.04123EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/15 6:33 p.m.22 views

CLSA-2022-1655317984 Fixed CVE-2022-22576 in curl

CVE-2022-22576: check additional SASL parameters for connection reuse...

8.1CVSS6.7AI score0.02161EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/15 6:28 p.m.9 views

CLSA-2022-1655317708 Fix CVE(s): CVE-2022-22576

SECURITY UPDATE: Reusing OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials - debian/patches/CVE-2022-22576.patch: Check additional SASL parameters for connection reuse - CVE-2022-22576...

8.1CVSS6.8AI score0.02161EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2022/06/15 12:00 a.m.44 views

EulerOS 2.0 SP9 : cyrus-sasl (EulerOS-SA-2022-1835)

According to the versions of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement...

8.8CVSS7.6AI score0.04123EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/06/15 12:00 a.m.48 views

EulerOS 2.0 SP9 : cyrus-sasl (EulerOS-SA-2022-1859)

According to the versions of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement...

8.8CVSS7.6AI score0.04123EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/06/07 12:00 a.m.19 views

Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2022-1802)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.1AI score0.04123EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/06/07 12:00 a.m.22 views

Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2022-1785)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.1AI score0.04123EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/06/06 12:00 a.m.33 views

EulerOS 2.0 SP10 : cyrus-sasl (EulerOS-SA-2022-1785)

According to the versions of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement...

8.8CVSS7.6AI score0.04123EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/06/06 12:00 a.m.13 views

EulerOS 2.0 SP10 : cyrus-sasl (EulerOS-SA-2022-1802)

According to the versions of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement...

8.8CVSS7.6AI score0.04123EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/26 5:15 p.m.34 views

CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

8.1CVSS0.02161EPSS
SaveExploits1References5
OSV
OSV
added 2022/05/26 5:15 p.m.5 views

ALPINE-CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

8.1CVSS7AI score0.02161EPSS
SaveExploits1References1
Prion
Prion
added 2022/05/26 5:15 p.m.36 views

Authentication flaw

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

5.5CVSS7.9AI score0.02161EPSS
SaveExploits1References5Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/05/26 5:15 p.m.9 views

CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

8.1CVSS6.8AI score0.02161EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2022/05/26 12:00 a.m.53 views

CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

8.3AI score0.02161EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2022/05/26 12:00 a.m.4 views

CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

6.7AI score0.02161EPSS
SaveExploits1References5
OSV
OSV
added 2022/05/26 12:00 a.m.49 views

CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

8.1CVSS2AI score0.02161EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2022/05/26 12:00 a.m.228 views

EulerOS 2.0 SP3 : cyrus-sasl (EulerOS-SA-2022-1712)

According to the versions of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement...

8.8CVSS7.6AI score0.04123EPSS
SaveExploits0References2
CVE
CVE
added 2022/05/26 12:00 a.m.353 views

CVE-2022-22576

CVE-2022-22576 is an improper authentication vulnerability in curl 7.33.0 through 7.82.0 that may allow reuse of OAuth2-authenticated connections without confirming the credentials used for the transfer, affecting SASL-enabled protocols (SMPTP(S), IMAP(S), POP3(S), LDAP(S) via OpenLDAP). The root...

8.1CVSS8AI score0.02161EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
added 2022/05/26 12:00 a.m.119 views

CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

8.1CVSS7AI score0.02161EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/05/25 12:00 a.m.15 views

Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2022-1712)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.1AI score0.04123EPSS
SaveExploits0References2
Rows per page
Query Builder