140 matches found
Debian courier-authlib 配置错误漏洞
Debian courier-authlib is a Debian open source application. It provides authentication services for other Courier applications. A misconfiguration vulnerability exists in the Debian courier-authlib package before 0.71.1-2, which stems from the possibility of including plaintext passwords in certa...
@app-box/web (=1.0.0), @comet/cms-site (>=3.0.0-canary.160.0 <=4.0.0-canary.1049.0) +33 more potentially affected by CVE-2021-21310 via next-auth (>=0.0.0-manual.83c4ebd1 <=3.29.10)
next-auth NPM version =0.0.0-manual.83c4ebd1, =3.0.0-canary.160.0, =2.0.1-canary.24.0, =1.0.99-0.next12, =0.1.0, =0.46.0, =0.30.0, =0.3.0, =0.10.0, =0.2.0, =0.3.0, =0.3.0, =0.4.0, =0.1.0, =0.1.3 and more Source cves: CVE-2021-21310 Source advisory: OSV:GHSA-PG53-56CG-4M8Q...
DEBIAN-CVE-2019-19906
cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in sasladdstring in common.c in cyrus-sasl...
The vulnerability of the Microsoft Authentication Library (MSAL), which stems from the lack of protection for service data, allows attackers to disclose the protected information.
The vulnerability of the Microsoft Authentication Library MSAL is related to the lack of protection for service data. Exploiting this vulnerability could allow a perpetrator to disclose the protected information...
CVE-2019-1487
An information disclosure vulnerability in Android Apps using Microsoft Authentication Library MSAL 0.3.1-Alpha or later exists under specific conditions, aka 'Microsoft Authentication Library for Android Information Disclosure Vulnerability'...
KLA11644 An information disclosure vulnerability in Microsoft Downloads
An information disclosure vulnerability was found in Microsoft Downloads. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2019-1487 Related products Microsoft-Authentification-Library-for-Android CVE list CVE-2019-1487 warning KB list Soluti...
Microsoft Authentication Library CVE-2019-1487 Information Disclosure Vulnerability
Description Microsoft Authentication Library is prone to a information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Authentication Library 0.3.1-Alpha Recommendations Block external...
Libntlm Buffer Overflow Vulnerability
Libntlm is an NTLM NT LAN Manager authentication library. A buffer overflow vulnerability exists in Libntlm 1.5 and earlier versions, which can be exploited by an attacker to cause a buffer overflow or heap overflow, among other things...
CVE-2019-1258
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens. This vulnerability allows an authenticated attacker to perform actions in context of another user. The authenticated attacker can exploit this...
Privilege escalation
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens, aka 'Azure Active Directory Authentication Library Elevation of Privilege Vulnerability'...
CVE-2019-1258 Azure Active Directory Authentication Library Elevation of Privilege Vulnerability
...
Microsoft Azure Active Directory Authentication Library Elevation of Privilege Vulnerability
Microsoft Azure Active Directory Authentication Library is an authentication library from Microsoft Corporation USA. This product allows client applications to authenticate users. An elevation of privilege vulnerability exists in On-Behalf-Of flow in the Azure Active Directory Authentication...
Description of the security update for Outlook 2016: September 12, 2017
None None...
CVE-2017-7696
SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service memory consumption via large values in the width and height parameters to otplogonuiresources/qr, aka SAP Security Note 2389042...
[SECURITY] Fedora 25 Update: canl-c-2.1.8-1.fc25
This is the C part of the EMI caNl -- the Common Authentication Library...
[SECURITY] Fedora 23 Update: canl-c-2.1.7-1.fc23
This is the C part of the EMI caNl -- the Common Authentication Library...
[SECURITY] Fedora 24 Update: canl-c-2.1.7-1.fc24
This is the C part of the EMI caNl -- the Common Authentication Library...
[SECURITY] Fedora 25 Update: canl-c-2.1.7-1.fc25
This is the C part of the EMI caNl -- the Common Authentication Library...
TinySRP Buffer Overflow
Dear Fulldisclosure, I submitted the below vulnerability to the HP Zero Day Initiative. They responded that they are not interested in vulnerabilities in this "product". Further, I tried to contact one of the authors Eric A. Young; the email bounced. I am busy with my day job and do not have the...