55 matches found
CVE-2026-96858
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...
CVE-2026-96858
A missing authentication vulnerability in the Windows Security Account Manager allows an authorized attacker to perform tampering locally . The root cause is identified as CWE-306 . While no specific exploit code is provided, the vulnerability has an official fix available via Microsoft. Detailed...
SUSE SLES12 Security Update : samba (SUSE-SU-2026:2073-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2073-1 advisory. This update for samba fixes the following issues - CVE-2026-2340: vfsworm does not block directory modification bsc1261158. - CVE-2026-3238:...
CVE-2026-4408
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...
EUVD-2024-51116
Malicious code in bioql PyPI...
The vulnerability of the Security Account Manager (SAM) on Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Security Account Manager SAM on Windows operating systems is related to mutual blocking of execution threads. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2025-21313
Windows Security Account Manager SAM Denial of Service Vulnerability...
CVE-2025-21313
CVE-2025-21313 corresponds to a Windows SAM Denial-of-Service vulnerability. The connected sources identify the affected component as Windows Security Account Manager (SAM) and classify the impact as Denial of Service (DoS) with CVSS v3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Expl...
CVE-2025-21313 Windows Security Account Manager (SAM) Denial of Service Vulnerability
...
CVE-2025-21313 Windows Security Account Manager (SAM) Denial of Service Vulnerability
...
CVE-2025-21313: Deadlock
Windows Security Account Manager SAM Denial of Service Vulnerability...
PT-2025-1117
Name of the Vulnerable Software and Affected Versions Windows Security Account Manager SAM affected versions not specified Description The issue is related to a denial-of-service vulnerability in the Windows Security Account Manager SAM. It is caused by a deadlock of execution threads. Exploitati...
Microsoft Windows Security Account Manager 安全漏洞
Microsoft Windows Security Account Manager is a Windows security account manager from Microsoft USA that is used to store user passwords. It can be used to authenticate local and remote users. A security vulnerability exists in Microsoft Windows Security Account Manager. An attacker could exploit...
CVE-2024-12802
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN User Principal Name and SAM Security Account Manager account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and...
SSL-VPN MFA Bypass Due to UPN and SAM Account Handling in Microsoft AD
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN User Principal Name and SAM Security Account Manager account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and...
PT-2025-1026
Name of the Vulnerable Software and Affected Versions SonicWall SSL-VPN Gen6 affected versions not specified SonicWall SSL-VPN Gen7 affected versions not specified SonicWall SSL-VPN Gen8 affected versions not specified Description An authentication bypass exists in SonicWall SSL-VPN when integrat...
Microsoft Windows Multiple Vulnerabilities (KB5015861)
This host is missing an important security update according to Microsoft KB5015861 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-30208
Windows Security Account Manager SAM Denial of Service Vulnerability...
KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...