Login Request a demo
MI
Vendor
MIT
12 products with CVEs on record
201
CVEs
0
On KEV
2
New 30D
Products
KR
krb5
MIT
6.5
2 CVEs0 on KEV2 new
K5
Kerberos 5
MIT
9.8
139 CVEs0 on KEV0 new
KE
Kerberos
Mit
7.5
33 CVEs0 on KEV0 new
MO
Moos-ivp
Mit
9.8
14 CVEs0 on KEV0 new
KR
Krb5-appl
Mit
7.5
4 CVEs0 on KEV0 new
CG
Cgiemail
Mit
–
2 CVEs0 on KEV0 new
SC
Scratch-svg-renderer
Mit
9.6
2 CVEs0 on KEV0 new
KF
Kerberos Ftp Client
Mit
–
1 CVEs0 on KEV0 new
MK
Mit Kerberos
Mit
–
1 CVEs0 on KEV0 new
PP
Pgp Public Key Server
Mit
–
1 CVEs0 on KEV0 new
SC
Scratch-vm
Mit
9.8
1 CVEs0 on KEV0 new
UT
Universal Turing Machine
Mit
7.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-107778
KR
krb5
MIT
6.5
0%
Oct 8MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()
CVE-2026-107708
KR
krb5
MIT
4.9
1%
Oct 8MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC
CVE-2026-85456
MO
Moos-ivp
Mit
5.5
0%
Sep 3MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windows
CVE-2026-85449
MO
Moos-ivp
Mit
7.5
1%
Sep 3MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT
CVE-2026-85448
MO
Moos-ivp
Mit
7.5
1%
Sep 3MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention
CVE-2026-85447
MO
Moos-ivp
Mit
7.5
1%
Sep 3MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service
CVE-2026-85446
MO
Moos-ivp
Mit
7.5
1%
Sep 3MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service
CVE-2026-85445
MO
Moos-ivp
Mit
7.5
1%
Sep 3MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count
CVE-2026-85444
MO
Moos-ivp
Mit
7.5
1%
Sep 3MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned
CVE-2026-85439
MO
Moos-ivp
Mit
7.8
0%
Sep 3MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname
CVE-2026-85438
MO
Moos-ivp
Mit
9.8
1%
Sep 3MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts
CVE-2026-85437
MO
Moos-ivp
Mit
9.8
1%
Sep 3MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders
CVE-2026-85435
MO
Moos-ivp
Mit
9.1
0%
Sep 3MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment
CVE-2026-85434
MO
Moos-ivp
Mit
9.1
0%
Sep 3MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping
CVE-2026-85429
MO
Moos-ivp
Mit
7.5
0%
Sep 3MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing
CVE-2026-85425
MO
Moos-ivp
Mit
9.8
2%
Sep 3MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS
CVE-2026-40356
K5
Kerberos 5
MIT
7.5
1%
Apr 28In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a…
CVE-2026-40355
K5
Kerberos 5
MIT
7.5
1%
Apr 28In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in…
CVE-2024-37371
K5
Kerberos 5
Mit
9.1
2%
Jun 28In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields
CVE-2024-37370
K5
Kerberos 5
Mit
7.5
1%
Jun 28In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear…
CVE-2024-26462
K5
Kerberos 5
Mit
5.5
0%
Feb 29Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c
CVE-2024-26461
K5
Kerberos 5
Mit
7.5
1%
Feb 29Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c
CVE-2024-26458
K5
Kerberos 5
Mit
5.3
1%
Feb 29Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c
CVE-2023-39975
K5
Kerberos 5
Mit
8.8
1%
Aug 16kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure
CVE-2023-36054
K5
Kerberos 5
Mit
6.5
3%
Aug 7lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer
CVE-2022-42898
K5
Kerberos 5
Mit
8.8
7%
Dec 25PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos…
CVE-2022-39028
K5
Kerberos 5
Mit
7.5
2%
Aug 30telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8
CVE-2020-27428
SC
Scratch-svg-renderer
Mit
6.1
1%
Jan 6A DOM-based cross-site scripting (XSS) vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file
CVE-2021-37750
K5
Kerberos 5
Mit
6.5
3%
Aug 23The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that…
CVE-2021-36222
K5
Kerberos 5
Mit
7.5
11%
Jul 22ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL…
CVE-2021-32471
UT
Universal Turing Machine
Mit
7.8
1%
May 10Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data
CVE-2019-25018
KR
Krb5-appl
Mit
7.5
2%
Feb 2In the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access restrictions via the filename of
CVE-2019-25017
KR
Krb5-appl
Mit
5.9
1%
Feb 2An issue was discovered in rcp in MIT krb5-appl through 1.0.3
CVE-2020-28196
K5
Kerberos 5
Mit
7.5
4%
Nov 6MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support…
CVE-2020-7750
SC
Scratch-svg-renderer
Mit
9.6
6%
Oct 21This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008
CVE-2020-14000
SC
Scratch-vm
Mit
9.8
3%
Jul 16MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files with certain _ characters, resulting in…
CVE-2019-14844
K5
Kerberos 5
Mit
7.5
4%
Sep 26A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes"
CVE-2018-20217
KE
Kerberos
Mit
5.3
1%
Dec 26A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17
CVE-2017-7562
K5
Kerberos 5
Mit
6.5
3%
Jul 26An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates
CVE-2018-5730
K5
Kerberos 5
Mit
3.8
2%
Mar 6MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a…
CVE-2018-5729
K5
Kerberos 5
Mit
4.7
3%
Mar 6MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or…
CVE-2018-5710
KE
Kerberos
Mit
6.5
2%
Jan 16An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16
CVE-2018-5709
KE
Kerberos
Mit
7.5
2%
Jan 16An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16
CVE-2017-15088
K5
Kerberos 5
Mit
9.8
8%
Nov 23plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows remote attackers to execute…
CVE-2017-11462
K5
Kerberos 5
Mit
9.8
5%
Sep 13Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error
CVE-2017-11368
KE
Kerberos
Mit
6.5
2%
Aug 9In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests
CVE-2016-3120
K5
Kerberos 5
Mit
6.5
5%
Aug 1The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when…
CVE-2016-3119
K5
Kerberos 5
Mit
5.3
40%
Mar 26The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through…
CVE-2015-8631
K5
Kerberos 5
Mit
6.5
5%
Feb 13Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a…
CVE-2015-8630
K5
Kerberos 5
Mit
7.5
4%
Feb 13The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4…
CVE-2015-8629
K5
Kerberos 5
Mit
5.3
4%
Feb 13The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters…
CVE-2015-2698
K5
Kerberos 5
Mit
–
3%
Nov 13The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows…
CVE-2015-2697
K5
Kerberos 5
Mit
–
4%
Nov 9The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds…
CVE-2015-2696
K5
Kerberos 5
Mit
–
5%
Nov 9lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect…
CVE-2015-2695
K5
Kerberos 5
Mit
–
6%
Nov 9lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service…
CVE-2015-2694
K5
Kerberos 5
Mit
–
3%
May 25The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote…
CVE-2014-5355
K5
Kerberos 5
Mit
–
5%
Feb 20MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote…
CVE-2014-9423
K5
Kerberos 5
Mit
–
4%
Feb 19The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits…
CVE-2014-9422
K5
Kerberos 5
Mit
–
3%
Feb 19The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows…
CVE-2014-9421
K5
Kerberos 5
Mit
–
6%
Feb 19The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly…