Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-43916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pamauthnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior to 0.2.0-alpha, a heap buffer over-read ...

8.7CVSS5.9AI score0.00055EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/12 1:31 p.m.24 views

CVE-2026-43916 pam_authnft: Heap buffer overflow in NETLINK_SOCK_DIAG reply walker

pamauthnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior to 0.2.0-alpha, a heap buffer over-read in peerlookuptcp src/peerlookup.c:134, prior to the fix allowed a crafted NETLINKSOCKDIAG reply to slip past the message-size check, then...

8.7CVSS0.00055EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/10 12:0 a.m.1 views

PT-2025-6067 · Unknown +2 · Pam Pkcs11 +2

Name of the Vulnerable Software and Affected Versions: PAM-PKCS11 versions 0.6.12 and prior Description: The issue affects a Linux-PAM login module that allows X.509 certificate-based user login. When a user presses ctrl-c/ctrl-d while being asked for a PIN, the pam pkcs11 module segfaults...

9.2CVSS8.1AI score0.00746EPSS
Exploits0References35
OSV
OSV
added 2009/04/08 6:30 p.m.1 views

DEBIAN-CVE-2009-1273

pamssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames...

5CVSS6.6AI score0.00358EPSS
Exploits0References1
CVE
CVE
added 2006/02/27 8:0 p.m.53 views

CVE-2006-0736

CVE-2006-0736 is a stack-based buffer overflow in the pam_micasa PAM authentication module of CASA, affecting Novell Linux Desktop 9 and Open Enterprise Server 1. The vulnerability allows remote code execution and could grant root access, via remote vectors. The SUSE advisory SUSE-SA:2006:010 con...

10CVSS8.2AI score0.18343EPSS
Exploits0References4Affected Software2
securityvulns
securityvulns
added 2002/05/06 12:0 a.m.19 views

ldap vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --- Blackshell Advisory 5 --- Local Format String Vuln in pamldap and remote in squidauthldap - --- Blackshell Advisory 5 --- - --- Versions Affected --- pamldap: 143 prior vendor status: nil squidauthldap: 2.0 prior vendor status: nil - --- What is...

7.7AI score
Exploits0
Rows per page
Query Builder