Threat and Vulnerability Intelligence Database

CVE-2024-10041	Pam: libpam: libpam vulnerable to read hashed password Description: A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications. EPSS Score: 0.05% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-6110	Openstack: deleting a non existing access rule deletes another existing access rule in it's scope Description: A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials. EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-5685	Xnio: stackoverflowexception when the chain of notifier states becomes problematically big Description: A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS). EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)