Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-104038 | 5.9 | A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security Identifier (SID) extension. In deployments configured with SID-based certificate mapping rules, the service fa | 2026-10-06 01:16:34 | 2026-10-06 01:16:34 |
| CVE-2026-104037 | 5.5 | A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can c | 2026-10-06 01:16:34 | 2026-10-06 01:16:34 |
| CVE-2026-104036 | 5.8 | A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by req | 2026-10-06 01:16:34 | 2026-10-06 01:16:34 |
| CVE-2026-104035 | 5.5 | A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Denial of Service (DoS) by maintaining a persistent connection and repeatedly storing and destroying credentials. Because the service | 2026-10-06 01:16:34 | 2026-10-06 01:16:34 |
| CVE-2026-104034 | 4.7 | A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder during Kerberos ticket-granting ticket (TGT) renewal, where a deferred callback accesses memory that has already been released. An auth | 2026-10-06 01:16:34 | 2026-10-06 01:16:34 |
| CVE-2026-104033 | 5.4 | A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an | 2026-10-06 01:16:34 | 2026-10-06 01:16:34 |
| CVE-2026-104032 | 5.5 | A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend | 2026-10-06 01:16:33 | 2026-10-06 01:16:33 |
| CVE-2026-104031 | 5.5 | A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client connection terminates. A local attacker can exploit this vulnerability b | 2026-10-06 01:16:33 | 2026-10-06 01:16:33 |
| CVE-2026-103271 | 7.5 | Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can bypass content restrictions by directly querying the content API to retrieve restricted posts | 2026-10-06 01:16:33 | 2026-10-01 11:17:22 |
| CVE-2026-103542 | 4.0 | A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smart_fill of the file /global/code/actions.php of the component AJAX Endpoint. This manipulation of the argument url causes server-side request forgery. The atta | 2026-10-06 01:16:33 | 2026-10-01 06:17:06 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13044
Zapisa po stranici: