162 matches found
DEBIAN-CVE-2021-28374
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's...
CVE-2021-28374
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's...
Debian courier-authlib 配置错误漏洞
Debian courier-authlib is a Debian open source application. It provides authentication services for other Courier applications. A misconfiguration vulnerability exists in the Debian courier-authlib package before 0.71.1-2, which stems from the possibility of including plaintext passwords in certa...
DEBIAN-CVE-2019-19906
cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in sasladdstring in common.c in cyrus-sasl...
The vulnerability of the Microsoft Authentication Library (MSAL), which stems from the lack of protection for service data, allows attackers to disclose the protected information.
The vulnerability of the Microsoft Authentication Library MSAL is related to the lack of protection for service data. Exploiting this vulnerability could allow a perpetrator to disclose the protected information...
CVE-2019-1487
An information disclosure vulnerability in Android Apps using Microsoft Authentication Library MSAL 0.3.1-Alpha or later exists under specific conditions, aka 'Microsoft Authentication Library for Android Information Disclosure Vulnerability'...
KLA11644 An information disclosure vulnerability in Microsoft Downloads
An information disclosure vulnerability was found in Microsoft Downloads. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2019-1487 Related products Microsoft-Authentification-Library-for-Android CVE list CVE-2019-1487 warning KB list Soluti...
Microsoft Authentication Library CVE-2019-1487 Information Disclosure Vulnerability
Description Microsoft Authentication Library is prone to a information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Authentication Library 0.3.1-Alpha Recommendations Block external...
Libntlm Buffer Overflow Vulnerability
Libntlm is an NTLM NT LAN Manager authentication library. A buffer overflow vulnerability exists in Libntlm 1.5 and earlier versions, which can be exploited by an attacker to cause a buffer overflow or heap overflow, among other things...
CVE-2019-1258
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens. This vulnerability allows an authenticated attacker to perform actions in context of another user. The authenticated attacker can exploit this...
Privilege escalation
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens, aka 'Azure Active Directory Authentication Library Elevation of Privilege Vulnerability'...
CVE-2019-1258 Azure Active Directory Authentication Library Elevation of Privilege Vulnerability
...
Microsoft Azure Active Directory Authentication Library Elevation of Privilege Vulnerability
Microsoft Azure Active Directory Authentication Library is an authentication library from Microsoft Corporation USA. This product allows client applications to authenticate users. An elevation of privilege vulnerability exists in On-Behalf-Of flow in the Azure Active Directory Authentication...
@cimpress/simple-auth-wrapper (>=2.2.0, <=2.2.3), @expo/auth0-lock (10.16.0) +18 more potentially affected by CVE-2017-17068 via auth0-js (>=8.0.0-beta.1, <=8.11.3)
auth0-js NPM version =8.0.0-beta.1, =2.2.0, =1.1.0, =1.1.0, =1.1.0, =1.0.0, =0.0.18, =1.5.0, =0.0.1, =10.8.0-beta.2, =1.0.8, =1.0.15 - ds-auth0-lock 1.0.0 and more Source cves: CVE-2017-17068 Source advisory: OSV:GHSA-3RPR-MG43-XHQ4...
Description of the security update for Outlook 2016: September 12, 2017
None None...
CVE-2017-7696
SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service memory consumption via large values in the width and height parameters to otplogonuiresources/qr, aka SAP Security Note 2389042...
[SECURITY] Fedora 25 Update: canl-c-2.1.8-1.fc25
This is the C part of the EMI caNl -- the Common Authentication Library...
[SECURITY] Fedora 23 Update: canl-c-2.1.7-1.fc23
This is the C part of the EMI caNl -- the Common Authentication Library...