Mit vulnerabilities

Products

• Kerberos 5 139
• Kerberos 33
• Moos-ivp 14
• Krb5 4
• Krb5-appl 4
• Kerberos 5 3
• Cgiemail 2
• Scratch-svg-renderer 2

Newest

• mit krb5 MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() CVE-2026-107778 Fix available 7.1 HighOctober 8, 2026
• mit krb5 MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC CVE-2026-107708 Fix available 6.9 MediumOctober 8, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windows CVE-2026-85456 6.8 MediumSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT CVE-2026-85449 8.7 HighSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention CVE-2026-85448 8.7 HighSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service CVE-2026-85447 8.7 HighSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service CVE-2026-85446 8.7 HighSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count CVE-2026-85445 8.7 HighSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned CVE-2026-85444 8.7 HighSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname CVE-2026-85439 8.5 HighSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts CVE-2026-85438 9.3 CriticalSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders CVE-2026-85437 9.3 CriticalSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment CVE-2026-85435 9.3 CriticalSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping CVE-2026-85434 9.3 CriticalSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing CVE-2026-85429 8.7 HighSeptember 3, 2026
• mit moos-ivp MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS CVE-2026-85425 9.3 CriticalSeptember 3, 2026
• mit kerberos 5 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of... CVE-2026-40356 Fix available 5.9 MediumApril 28, 2026
• mit kerberos 5, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application... CVE-2026-40355 Fix available 5.9 MediumApril 28, 2026
• mit kerberos 5 In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer... CVE-2025-24528 Fix available 7.1 HighJanuary 30, 2025
• mit kerberos 5, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS... CVE-2024-37371 Fix available 9.1 CriticalJune 28, 2024
• mit kerberos 5, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count... CVE-2024-37370 Fix available 7.5 HighJune 28, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. CVE-2024-26462 Fix available 5.5 MediumFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... CVE-2024-26461 Fix available 7.5 HighFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26458 Fix available 5.3 MediumFebruary 26, 2024
• mit kerberos 5 kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is... CVE-2023-39975 Fix available 8.8 HighAugust 16, 2023
• mit kerberos 5, debian linux, netapp active iq unified manager +4 more +6 more lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... CVE-2023-36054 Fix available 6.5 MediumAugust 7, 2023
• heimdal project heimdal, mit kerberos 5, samba +3 more +5 more Important: krb5 security update CVE-2022-42898 Fix available 8.8 HighNovember 19, 2022
• debian linux, gnu inetutils, mit kerberos 5 +1 more +3 more telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a... CVE-2022-39028 Fix available 7.5 HighAugust 30, 2022
• mit scratch-svg-renderer Cross-site Scripting in Scratch-Svg-Renderer CVE-2020-27428 6.1 MediumJanuary 5, 2022
• mit kerberos 5, debian linux, fedoraproject fedora +5 more +7 more The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1... CVE-2021-37750 Fix available 6.5 MediumAugust 23, 2021
• mit kerberos 5, debian linux, netapp active iq unified manager +7 more +9 more ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... CVE-2021-36222 Fix available EPSS 10.5% 7.5 HighJuly 22, 2021
• mit universal turing machine Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing... CVE-2021-32471 Public exploit 7.8 HighMay 10, 2021
• mit krb5-appl An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation... CVE-2019-25017 Fix available 5.9 MediumFebruary 2, 2021
• mit krb5-appl In the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access... CVE-2019-25018 Fix available 7.5 HighFebruary 2, 2021
• mit kerberos 5, fedoraproject fedora, netapp active iq unified manager +11 more +13 more MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via... CVE-2020-28196 Fix available 7.5 HighNovember 6, 2020
• mit scratch-svg-renderer Cross-site Scripting (XSS) CVE-2020-7750 Public exploitFix available 9.6 CriticalOctober 21, 2020
• mit scratch-vm Remote Code Execution in scratch-vm CVE-2020-14000 Fix available 9.8 CriticalJuly 16, 2020
• fedoraproject fedora, mit krb5, kerberos 5 +2 more A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a... CVE-2019-14844 7.5 HighSeptember 26, 2019
• mit kerberos, debian linux +1 more A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17.... CVE-2018-20217 Fix available 5.3 MediumDecember 26, 2018
• debian linux, fedoraproject fedora, mit kerberos 5 +3 more +5 more MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... CVE-2018-5730 Fix available 3.8 LowMarch 1, 2018
• debian linux, fedoraproject fedora, mit kerberos 5 +3 more +5 more MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... CVE-2018-5729 Fix available 4.7 MediumMarch 1, 2018
• mit kerberos An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function ... CVE-2018-5710 Fix available 6.5 MediumJanuary 16, 2018
• mit kerberos An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry-... CVE-2018-5709 Fix available 7.5 HighJanuary 16, 2018
• mit krb5, kerberos 5, redhat enterprise linux +3 more +5 more An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1... CVE-2017-7562 Fix available 6.5 MediumNovember 20, 2017
• mit kerberos 5 plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2... CVE-2017-15088 Fix available 9.8 CriticalNovember 8, 2017
• mit kerberos 5, fedoraproject fedora +1 more Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified... CVE-2017-11462 Fix available 9.8 CriticalSeptember 13, 2017
• mit kerberos, kerberos 5, fedoraproject fedora +2 more In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion... CVE-2017-11368 Fix available 6.5 MediumAugust 9, 2017
• mit kerberos 5 The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT... CVE-2016-3120 Fix available 6.5 MediumAugust 1, 2016
• mit kerberos 5, opensuse leap, opensuse +2 more The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB... CVE-2016-3119 Fix available EPSS 39.8% 5.3 MediumMarch 25, 2016
• mit kerberos 5 The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv... CVE-2015-8630 Fix available 7.5 HighFebruary 5, 2016
• Show olderLoading…