Lucene search
K

5 matches found

ATTACKERKB
ATTACKERKB
added 2021/03/08 9:15 p.m.1 views

CVE-2021-21335

In the SPNEGO HTTP Authentication Module for nginx spnego-http-auth-nginx-module before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of...

9.8CVSS5.4AI score0.00416EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2021/03/08 8:20 p.m.14 views

CVE-2021-21335 Basic Authentication can be bypassed using a malformed username

In the SPNEGO HTTP Authentication Module for nginx spnego-http-auth-nginx-module before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of...

5.3CVSS9.5AI score0.00416EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/08 12:0 a.m.1 views

spnego-http-auth-nginx-module 授权问题漏洞

Sean Timothy Noonan spnego-http-auth-nginx-module is a Sean Timothy Noonan open source application. It provides a way to add SPNEGO support to nginx functionality. A security vulnerability exists in SPNEGO HTTP Authentication Module for nginx, which stems from the fact that basic authentication c...

9.8CVSS8.3AI score0.00416EPSS
Exploits0References2
Cvelist
Cvelist
added 2001/05/07 4:0 a.m.15 views

CVE-2001-0060

Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username...

7.4AI score0.01065EPSS
Exploits0References7
Cvelist
Cvelist
added 2001/04/04 4:0 a.m.17 views

CVE-2001-0320

bbsmilies.php and bbcoderef.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. dot dot sequences into a malformed username argument...

6.9AI score0.00086EPSS
Exploits1References1
Rows per page
Query Builder