439 matches found
CLEANSTART-2026-AX77726 vulnerability was found in PAM
Multiple security vulnerabilities affect the gitlab-shell-fips package. A vulnerability was found in PAM. See references for individual vulnerability details...
CVE-2025-24531
In OpenSC pampkcs11 before 0.6.13, pamsmauthenticate wrongly returns PAMIGNORE in many error situations such as an error triggered by a smartcard before login, allowing authentication bypass...
CVE-2025-31510
In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting XSS allows remote attackers to inject arbitrary web script or HTML into the login page via the tab parameter, for Choice authentication...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the md4sum function of the NTLM authentication module. An attacker can execute arbitrary code with the privileges of the affected application. Remediation A fix was pushed into the master branch but not ye...
CLSA-2025-1767001153 pam: Fix of CVE-2025-8941
CVE-2025-8941: fix additiinally potential privilege escalationvia multiple symlink attacks and race conditions...
Important Photon OS Security Update - PHSA-2025-5.0-0710
Updates of 'httpd', 'Linux-PAM' packages of Photon OS have been released...
RHEL 10 : pam (RHSA-2025:22019)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:22019 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...
RHSA-2025:20181 Red Hat Security Advisory: pam security update
Bulletin has no description...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the AuthN implementation. An attacker can access sensitive information by sending unauthorized requests. Remediation Upgrade github.com/NVIDIA/aistore/api/authn to version 1.3.31 or higher. References - GitHub...
Use of Hard-coded Credentials
Overview Affected versions of this package are vulnerable to Use of Hard-coded Credentials in the AuthN implementation. An attacker can gain unauthorized access to sensitive information, escalate privileges, and tamper with data by leveraging hard-coded credentials. Remediation Upgrade...
Astra Linux – Vulnerability in pam
A vulnerability was discovered in PAM. Secret information is stored in memory, and the attacker can trigger the victim’s program to execute by sending characters to its standard input stdin. During this process, the attacker can instruct the branch predictor to execute a ROP chain speculatively...
OpenVPN Access Server 安全漏洞
OpenVPN Access Server is a web-based VPN management interface from OpenVPN, Inc. A security vulnerability exists in OpenVPN Access Server versions 2.14.0 through 2.14.3, which stems from the RelayState parameter in the SAML Authentication module not being filtered correctly, which could lead to...
ROS-20251022-01
Authentication and authorization module for Apache 2.x HTTP server Modauthopenidc vulnerability is related to an information disclosure. Exploitation of the vulnerability allows an attacker acting remotely to disclose protected information...
ROS-20251014-02
A vulnerability in the pamsmauthenticate function of the Yubico pam-u2f PAM module is related to the return of an invalid status code state. Exploitation of the vulnerability could allow an attacker to escalate privileges...
EUVD-2001-1439
Malware in sbrugna...
EUVD-2016-7572
Malware in sbrugna...
EUVD-2021-25579
Malware in sbrugna...
EUVD-2014-5177
Malware in sbrugna...