Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 12:34:03 +0000 cnvd-2020-40608 https://cve.radiocsirt.org/vuln/cnvd-2020-40608 cnvd-2020-40608 https://cve.radiocsirt.org/vuln/cnvd-2020-40608 EUVD-2026-41561 https://cve.radiocsirt.org/vuln/euvd-2026-41561 EUVD-2026-41561 https://cve.radiocsirt.org/vuln/euvd-2026-41561 fkie_cve-2020-13110 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13110 <p>The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.</p> <p>The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-13110 GHSA-m2mx-rfpw-jghv — DLL Injection in kerberos https://cve.radiocsirt.org/vuln/ghsa-m2mx-rfpw-jghv <p><strong>Affected:</strong> npm: kerberos</p> <p>Version of `kerberos` prior to 1.0.0 are vulnerable to DLL Injection. The package loads DLLs without specifying a full path. This may allow attackers to create a file with the same name in a folder that precedes the intended file in the DLL path search. Doing so would allow attackers to execute arbitrary code in the machine.</p> <p>## Recommendation</p> <p>Upgrade to version 1.0.0 or later.</p> <p><strong>Affected:</strong> npm: kerberos</p> <p>Version of `kerberos` prior to 1.0.0 are vulnerable to DLL Injection. The package loads DLLs without specifying a full path. This may allow attackers to create a file with the same name in a folder that precedes the intended file in the DLL path search. Doing so would allow attackers to execute arbitrary code in the machine.</p> <p>## Recommendation</p> <p>Upgrade to version 1.0.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-m2mx-rfpw-jghv gsd-2020-13110 https://cve.radiocsirt.org/vuln/gsd-2020-13110 gsd-2020-13110 https://cve.radiocsirt.org/vuln/gsd-2020-13110