Lucene search
+L

64 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•17 views

EulerOS Virtualization 2.11.1 : pam (EulerOS-SA-2026-3449)

According to the versions of the pam package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to...

7.8CVSS6.8AI score0.00781EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•21 views

EulerOS Virtualization 2.11.0 : pam (EulerOS-SA-2026-3536)

According to the versions of the pam package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to...

7.8CVSS6.8AI score0.00781EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/03/17 12:00 a.m.•16 views

EulerOS Virtualization 2.12.0 : pam (EulerOS-SA-2026-1508)

According to the versions of the pam package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local...

7.8CVSS7.3AI score0.00472EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•17 views

EulerOS Virtualization 2.10.0 : pam (EulerOS-SA-2026-1188)

According to the versions of the pam package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local...

7.8CVSS7.3AI score0.00472EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/03 12:00 a.m.•11 views

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103084)

The version of AHV installed on the remote host is prior to 20230302.103084. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103084 advisory. - A vulnerability has been identified in the libarchive library, specifically within the...

7.8CVSS7.5AI score0.00985EPSS
SaveExploits4References7
Oracle linux
Oracle linux
•added 2025/11/25 12:00 a.m.•14 views

pam security update

1.6.1-8 - pamnamespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-101174...

7.8CVSS7.5AI score0.00472EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/11/22 12:00 a.m.•14 views

EulerOS 2.0 SP13 : pam (EulerOS-SA-2025-2442)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks a...

7.8CVSS6.9AI score0.0055EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2025/11/21 12:00 a.m.•10 views

Huawei EulerOS: Security Advisory for pam (EulerOS-SA-2025-2452)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00277EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/11/06 12:00 a.m.•13 views

Linux-PAM pam_namespace Privilege Escalation

The vulnerability of the pamnamespace component of the Linux-PAM authentication module is related to incorrect pathname restrictions when processing symbolic links. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

7.8CVSS8AI score0.00277EPSS
SaveExploits0References22Affected Software6
Tenable Nessus
Tenable Nessus
•added 2025/10/24 12:00 a.m.•8 views

EulerOS 2.0 SP13 : pam (EulerOS-SA-2025-2273)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevat...

7.8CVSS7.3AI score0.00472EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/24 12:00 a.m.•14 views

EulerOS 2.0 SP13 : pam (EulerOS-SA-2025-2305)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevat...

7.8CVSS7.3AI score0.00472EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/09 12:00 a.m.•19 views

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1)

The version of AOS installed on the remote host is prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1 advisory. - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that cal...

9.8CVSS7.9AI score0.73452EPSS
SaveExploits119References43
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2010-3832

Malware in sbrugna...

6.9CVSS6.6AI score0.00412EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2025/09/12 12:00 a.m.•9 views

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.0.1)

The version of AHV installed on the remote host is prior to 10.3.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.0.1 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointe...

9.4CVSS7.9AI score0.04875EPSS
SaveExploits98References15
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•8 views

EulerOS 2.0 SP10 : pam (EulerOS-SA-2025-2107)

According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevate...

7.8CVSS7.3AI score0.00472EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/09 7:19 a.m.•22 views

Security Bulletin: Vulnerability in pam library (CVE-2025-6020) affects Power HMC.

Summary The pam library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-6020 DESCRIPTION: A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing...

7.8CVSS7.2AI score0.00472EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2025/09/03 1:31 a.m.•19 views

linux-pam: Incomplete fix for CVE-2025-6020

A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...

7.8CVSS7.3AI score0.00472EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/09/03 1:27 a.m.•19 views

linux-pam: Incomplete fix for CVE-2025-6020

A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...

7.8CVSS7.3AI score0.00472EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/09/03 1:08 a.m.•16 views

linux-pam: Incomplete fix for CVE-2025-6020

A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...

7.8CVSS7.3AI score0.00472EPSS
SaveExploits0References4
Oracle linux
Oracle linux
•added 2025/09/02 12:00 a.m.•24 views

pam security update

1.1.8-23.0.3 - pamnamespace: fix potential privilege escalation CVE-2025-6020 Orabug: 38156729...

7.8CVSS7.5AI score0.00472EPSS
SaveExploits0
Rows per page
Query Builder