Browse CVEs

CRITICAL 9.8 CVE-2023-48654 One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login sc… Password Manager 5.13.1+ Fix from $2,3002023-12-25 HIGH 8.8 CVE-2023-51772 One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login sc… Password Manager 5.13.1+ Fix from $1,9502023-12-25 MEDIUM 6.8 CVE-2023-4003 One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM th… Password Manager 5.11.2 / 5.12.2+ Fix from $1,6002023-09-27 HIGH 7.5 CVE-2022-38725 An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted… Syslog Ng 3.38.1 / 6.0.5+ Fix from $1,9502023-01-23 MEDIUM 5.3 CVE-2020-7962 An issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid answers for a user. It is possible for an attacker to… Password Manager Mitigation only Fix from $1,6002020-11-13 HIGH 7.8 CVE-2020-8019 A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise… Syslog Ng 2.0.9-27.34.40.5.1 / 3.6.4-12.8.1+ Fix from $1,9502020-06-29 MEDIUM 6.5 CVE-2019-13497 One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests. Cloud Access Manager 8.1.4+ Fix from $1,6002019-11-04 HIGH 8.1 CVE-2019-13496 One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender produc… Cloud Access Manager 8.1.4+ Fix from $1,9502019-11-04 HIGH 7.4 CVE-2019-13498 One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This is… Cloud Access Manager No fix yet Fix from $1,9502019-07-29 MEDIUM 6.9 CVE-2011-0343 Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng … Syslog Ng Patch available Fix from $1,6002011-01-28 HIGH 9.3 CVE-2008-5110 syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when … Syslog Ng after 2.0.9 Fix from $1,9502008-11-17 HIGH 7.5 CVE-2002-1200EPSS 6% Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer… Syslog Ng Patch available Fix from $1,9502002-10-28